General

  • Target

    0x000600000001643c-65.dat

  • Size

    222KB

  • MD5

    6d80262e654cda95522cecd7a9e18bd6

  • SHA1

    15a8b69a3ff3c28edc83e2bff7c1a3ecc6982014

  • SHA256

    67e3d9d3299079a929edd1554ce3fd11558b816fcf63e1436a8b2b0123f80d08

  • SHA512

    91f3558c779e26659ba977decf7b23e3ae698a2a96b543646dab12d24795745e82a38b005edb9fe839361f7d8ac527c125481a448eb0d2e824f785bfa6db6e04

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001643c-65.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections