General

  • Target

    0x0006000000015cee-109.dat

  • Size

    223KB

  • MD5

    e8ffcd7f525ce18c3aeac99f59497729

  • SHA1

    95fe21723da034043eb786302f65103a9b7b67ab

  • SHA256

    2303d9a86ffb1c9dfbb4895d63594438a59edf13d1e9a87ead58e6dec89474dc

  • SHA512

    823b595cf48d2ad3a3e3e333f1986c2170752173efc43da4df7bf925e478479e8c2a3796d23de342f4e16fe5d57aa65a9023419e3471dc1783de7c5998868d58

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000015cee-109.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections