General

  • Target

    0x000600000002322b-374.dat

  • Size

    222KB

  • MD5

    c93779860ec100cd1ff3ffe6c370e44a

  • SHA1

    7465e4c677cca9a49e98c38954ae2e5ee75202a8

  • SHA256

    f076f246eeb4ded22ae811d8dca79c1f08afaeb42b7a1becd2ec4252dda6aca0

  • SHA512

    9da2168e7a7fa48faa751f3fcd02be50da3ac0c8b93bbc4cd8a5521d79b0ebe0a17f326eefa4a5658d8529021ba2de4158bb1150d992f6ffee909c1c420ec8ec

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000002322b-374.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections