General

  • Target

    0x0007000000022ca1-41.dat

  • Size

    221KB

  • MD5

    c675d2b42fe89c490392cf77d4421e83

  • SHA1

    f63be2c23d585c241f8af93a3cfc559bb9550369

  • SHA256

    f2cb90dfdb7229f0c14b6ed9d5b970456fffe0e548d09716a04e636f1a811af7

  • SHA512

    813b8ab00961ab756e7509a2538b59b1595db504d2c7f99b5c473cd47119067cdeb107d5688ac1a82f7b4462fc590711e5600b92d9b3cdc2d13ea526d4392745

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000022ca1-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections