General

  • Target

    0x000500000001939d-65.dat

  • Size

    221KB

  • MD5

    0f32e58c2ae663a8982ff428111c1043

  • SHA1

    070240110a969384e48781ed6b5aa15c4da804c1

  • SHA256

    ef550692ac6dfac4c191d08509bdcfbd1f3f48ec9c032afb2b4b63a2fad06f88

  • SHA512

    ddd9d6bcd74252cf4d5b49234da088c41abb930d6ff4c4237b8aef8f23268f78e418b603e140bd9f8d5d3a9992d19da738424dbe01db8838c27d166b28945183

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000500000001939d-65.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections