General

  • Target

    0x000500000001949d-66.dat

  • Size

    222KB

  • MD5

    478b09cae00f1011d7bac32c739e73ae

  • SHA1

    518ae6a85c531090a19d4c8279de83c6b3087c13

  • SHA256

    55908054b66a55a322dc132e7b534e816e4139a9c55c9166638ae391b22bd159

  • SHA512

    b849cf748655b97b7c3c209eb337fff1fd393b8be199d1e7fc507b09fdca6fead438afb2aeba276c27202934c9ec2bb3ae04ecae280d7b4703114e38eada702f

  • SSDEEP

    3072:XjJsVUnYNgcDTrB2Sr1DDfNt/qOWGkHCfbLCdrUd2j:XjJsSYNgcDn4SZDzH/oGkHCDL2rUd

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinder

C2

109.107.182.133:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000500000001949d-66.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections