General

  • Target

    0x0006000000016d0c-126.dat

  • Size

    221KB

  • MD5

    b97a8770f9888b1e60000468d72b8e3c

  • SHA1

    98703b1ece52f21577cfe5fd034411723f009f88

  • SHA256

    5b84a4e0bdad098ef5d7d9ababce0c4b88c30426b400d824af02e052042fc1f1

  • SHA512

    4ca07613938abb34353e07749a19aeba62a16bffa60f68526a4a0ed2c8140cae25873b31589dfc77293dd7136de42d30e3cc9a82ed3631c469f68d05d03dbf44

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000016d0c-126.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections