General

  • Target

    0x000600000001565c-63.dat

  • Size

    221KB

  • MD5

    aa64aaf8f16c1d4eb7428d3fe6bd2e5c

  • SHA1

    3383eae284f7351f177373ca0002e4489f3d50d2

  • SHA256

    005378b3d440bf27ff0ad7847e720c715812076f75a3990d42e3fcf9d5a0592b

  • SHA512

    916e6000e4729cfcc86ec5edc1b377e1a67f04c92c462281547d163ddfec0ef316f6452624cdcaaebcb79429d0003f9a2877b9f9394844dee2ce61726b13b963

  • SSDEEP

    3072:t3zxq4nKNgcb03jq+PEQDt/q6VOu3HeBM8dtucsh:t3zxVKNgcbsjOQB/nOu3HeWetuc

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

rapta

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001565c-63.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections