General

  • Target

    0x0007000000022e39-41.dat

  • Size

    222KB

  • MD5

    407920b72e213307f14899ced9cc412d

  • SHA1

    b1049a3e359953c1b5aee5c8e8fade8d1a7093e5

  • SHA256

    dc8c9469c93685ae910b569d523201ba49b03a8cc84ba989fe12578110ea0de9

  • SHA512

    89d3b90131c145ae858f64ade41f207f949ddb62369fb810a6e142b6608143651b7d0c4cca0623af755fd1f231e621a2f146b4c76f88d3c8a86b9a2fea80ea6b

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000022e39-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections