General

  • Target

    0x0006000000018bd0-215.dat

  • Size

    221KB

  • MD5

    2617c290271b63a52b8cb79896e56c75

  • SHA1

    cd2d5edb4f499063aa681049ad16c2130ef8cf5c

  • SHA256

    250c95344bd62c93d3a24447896bcf8eb1bc2d73ee4e3c811fa93854f966eeac

  • SHA512

    d87a606389b44c94a9261bc3e83926f57b6fd264322c00f62cc79e55df569175400cff3e117934db21b87fbcf4f17b380399906a5bf95b6f6faf0386a7804586

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000018bd0-215.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections