General

  • Target

    0x0006000000022dfa-41.dat

  • Size

    222KB

  • MD5

    6698b85a7953eda4fe3f91f58615b436

  • SHA1

    0ca2796c061b00e7e26ccfbd4d575f0b7a71a911

  • SHA256

    a6fa1b8eed928b10d03aa21796838eb9e9958d9db77a1e038fa571bb0de9b08f

  • SHA512

    05bd9e5b633d3310c1556dd3eb6f6e721ee29aa1a24142195c23c0914c2ef2e0254418d27851e20c23cda44e145416b2b54f886159d0dcc24ab3beaf5bac35b2

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000022dfa-41.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections