General

  • Target

    0x0006000000015616-159.dat

  • Size

    221KB

  • MD5

    a08c810f8a1a14284482e79626f14eb4

  • SHA1

    073033a7434f55accc4b07cdce6a5b46b92d72d8

  • SHA256

    f59dad11fe22ef050ea70d65b3dde80d78d71e68bd5eefe6630125e915419134

  • SHA512

    909011ebfcf5a51a3c9bf9a9b4baa6d6def6b5477ebc7aed3795f66d9a6757c6c0388ed30257b97b25c763780d05105c6cfcc4f5e2b594a713e3ffe2cdcefb92

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000015616-159.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections