General

  • Target

    0x0006000000016c3c-291.dat

  • Size

    221KB

  • MD5

    bb95004c4e2829c6993509f84f0329d8

  • SHA1

    8c7a14764f4e79f148e72db42bccf8fb3b877b4c

  • SHA256

    2847855e01d99c47f3f2f7a1b57ec1c6c6734590230ddfacdb9efc643d5485f9

  • SHA512

    fa6dad2d5523686ffebc00f495192fdb49ee4897275c280e5ec46e7c4ea4e221832e05d103aecd25991741bc87c28f820996fccd3e646f65e6cc894d701cafc9

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000016c3c-291.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections