General

  • Target

    0x0006000000023203-247.dat

  • Size

    222KB

  • MD5

    d6284a92bdffbe7be8d8d2475ed894fb

  • SHA1

    52bca5567e62c089b54300a540146a885f20c8d5

  • SHA256

    c362642451c4b0fe6896015f0ca3bfc527edf7809d5645c33e75193743e36385

  • SHA512

    5c889971e0ce01f24f14e6e14332921919b2cb3cf99221d9b38fe3c75dc865a7987d9626c5c91610c6b4602841f0e5f05ad15215b4b22034faa6e3388defbe07

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000023203-247.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections