General

  • Target

    0x0006000000016d04-88.dat

  • Size

    219KB

  • MD5

    0bc9a7ef794b2db4263c1f17e8a8a6d4

  • SHA1

    2a1bc36ee8a7c04c75154e893c07cad6bc509b38

  • SHA256

    5a29f66a0711dd642209ebe3899e2a57c182b269fda60e18f261c6e96efcfb58

  • SHA512

    59b1fed1a35c2ebb9524ec01b13bbb7e64541d84749a619b50a2d0b38fd54534a296e2c4392c12d0d4b1c7a277c6869d440061af27b605c64872756468e9c18a

  • SSDEEP

    6144:neT7M7zNgcEgkrbVNurQ+9/Ac0NV1SE561FJ:QCNgcEjryV4cA561FJ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kedru

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000016d04-88.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections