General

  • Target

    0x0006000000015c94-71.dat

  • Size

    221KB

  • MD5

    01d8a8e7f3fe530f4d8882938234cf03

  • SHA1

    98d12527d2a1095611c21de1a7d4ba496c5d80e2

  • SHA256

    cdbd92edfeac51f372e215bf8acc88b5ac212266ac394455609aeaeb20b16a5e

  • SHA512

    f64bf9288c9cbc35f566da23eadc45a1fa1ca2b60fa44381ee8dabef99f2824a47882313a54d1c3e3197ccc9df35cd348e0456fe37d2a83f5f7c403d0806b584

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000015c94-71.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections