General

  • Target

    0x00060000000232b2-446.dat

  • Size

    222KB

  • MD5

    e432e254df859e29c44c5e1e581d1574

  • SHA1

    d3b583a49169d055cd90d85cd60e5cf8aca494c3

  • SHA256

    c4f1eb2c7bd496b7a714bcc05a76a2db530b7c782a405327af4db5cf91239313

  • SHA512

    11de02e5226a35eb27d0cc5886a9822542b9057c84e05ba239bf3bd55d50b18126c1caac4173aada45e495c31f32c98b352caa093f0a86139755b94c1b8b5812

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00060000000232b2-446.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections