General

  • Target

    0x0006000000016830-67.dat

  • Size

    223KB

  • MD5

    aa2a300e769848a3e04999d0b047284b

  • SHA1

    450aa169a0fb96356cf1e0b199de2b4aaf5dbe9a

  • SHA256

    27c5e7d5d6dac0851866cd506ce7721df17be36abae7cd4fe1b4114b75a16747

  • SHA512

    16cae20aeededdd403de1f5cb46c0af7769eb39eea78cd05b98b9fe5a57831a97c70c9d1caea37a176bf1eab0595a4db745e52987aae8ed3fbfde666bf002086

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000016830-67.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections