General

  • Target

    0x0006000000015c32-188.dat

  • Size

    222KB

  • MD5

    815ba3d3057b8f4e561f524a2b577365

  • SHA1

    30c1ed2e710e8740154331be8cd333eda2442067

  • SHA256

    26a379ac990f7f769c7b1b4b7bf7d0bdc4052d39d1cb1d7bb828653478976be5

  • SHA512

    1fafee566bf196321fef8cd139f72d634e40f437a61177fa68101e3e486b25125787d1d888472d9e433fa81e71ecebb7976951653b8d67d5f14f7cafaec16e3d

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000015c32-188.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections