General

  • Target

    685026ce65f3eea112dbf6f40cdebb09.bin

  • Size

    221KB

  • MD5

    685026ce65f3eea112dbf6f40cdebb09

  • SHA1

    a466014532b2d96c5bdb0d903960a96197bd6020

  • SHA256

    354f9ca10551e83273b2eb2de29cb69cf7bc602a6cea1cb2375551b75d33cee6

  • SHA512

    b01efa49fb535c7a39fb0b557c994d3de654e89999f0c399a623c7ac08bacce7274618cbcb0675b7eb0ad83c8cfb04802520b0aa2c62da874445a491a370fd7a

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 685026ce65f3eea112dbf6f40cdebb09.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections