General

  • Target

    0x000600000001626b-104.dat

  • Size

    222KB

  • MD5

    9ef036ca25f1c33a5bd171d346e1ec98

  • SHA1

    4afc350fa13f1b694ebf7f7fbdbb33b572842a0c

  • SHA256

    6ecab6a4267ee53416cdb980cd57c98af217c4cafb5d18c31a8640365d8343f1

  • SHA512

    a944075955f404787841484fe08880490425b93c7a24e33641d57893568e3321ac55574aae2a7f43ebc18dc4bb1fc4d5bfdb822e365b95e7a36edb1eeff24c4a

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000600000001626b-104.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections