Overview

overview

10

Static

static

10

0x00060000...49.exe

windows7-x64

10

0x00060000...49.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x0006000000017564-149.dat

  • Size

    221KB

  • MD5

    d34bca193b7fe7e117276f92b5a9df8c

  • SHA1

    0975086cc00731a887731cc522fdc72be50e18fc

  • SHA256

    48ed6373e6158722aa459eb68fc6012495d6c95f7bf65ef27dfe742689b51df2

  • SHA512

    3b8a3316a54c205fbf6e62449cd098c89df4e150cf0e031f22ec121be08a5468d724990b9b85fbc37bac875fa0314ede64d4d45e1ce1b4d0baabad91f3ae627b

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10
kinzaredline

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000017564-149.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections