Overview

overview

10

Static

static

10

0x00060000...88.exe

windows7-x64

10

0x00060000...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0006000000018b5d-188.dat

  • Size

    223KB

  • MD5

    0eebcb1ab154d58d3ccde2b5e32d57ca

  • SHA1

    b3b842102e5a3290920b5d502826848e1a3148f5

  • SHA256

    9aad229a92b36ceedcf2db0aa02d323300eb4376e1c17f5bb0a5681a8305f5cb

  • SHA512

    9e8ab52b0ae7c04c602df14c9e77c00d14f3acd1a2c600018202f0bae1abad9a9a3f5faf51cc52dc6f91a8f3739edbe474ccef000bb782721ee9b9cd1c87cd72

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10
kukishredline

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000018b5d-188.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections