Overview

overview

10

Static

static

10

0x00060000...63.exe

windows7-x64

10

0x00060000...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000600000001643c-63.dat

  • Size

    222KB

  • MD5

    669099cc089fd39bd8d43117f3b9a338

  • SHA1

    b134e6482c023fe6cdf6cd913a2beb3a6c510c8e

  • SHA256

    09938eeae9c8c155a7db8e65d79b723c3dd15c9deb51ff1faa884faa2c02c06d

  • SHA512

    70e0b0ea38f2d464833e0c1ab14b8449547a2d53f54c5ce24f8950e65f0b941212c54ee2d07b788aa872d91c97c416446e100bc86ce26d9b3ace0ef2667d8858

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
kukishredline

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001643c-63.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections