General

  • Target

    0x0006000000022df8-41.dat

  • Size

    222KB

  • MD5

    22eb853781b3c4520d0ea1cd8909e50f

  • SHA1

    8866ef54f32cd12502f5340c3b694c2e570b6b61

  • SHA256

    608471fc87b74c1c614e4510239ac734205bae683428d0803f2088b3c6f20389

  • SHA512

    85a1d20b3e3ab22c1c4d933dc76e2c92ae7d8f4b7babb29959afd5e25c044a45b3ca526b21d90a088845c97fca6e325ad9f79be5d10bdea2b7db1ef5abbde237

  • SSDEEP

    3072:XjJsVUnYNgcDTrB2Sr1DDfNt/qOWGkHCfbLCdrUd2j:XjJsSYNgcDn4SZDzH/oGkHCDL2rUd

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinder

C2

109.107.182.133:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000022df8-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections