General

  • Target

    0x0006000000022e4c-127.dat

  • Size

    222KB

  • MD5

    0691136eeb7adb1bb4ca24f65466a3a3

  • SHA1

    efc5ab715cb30f4e1df68d282d784da96fa4cec8

  • SHA256

    229b72eceb4354880c9dc5c9bb1ec7d4990625f54fe57de9608c8561ca0a5e83

  • SHA512

    e968ff1a2da4c94e84f06fbf744c8f0954957d63a11a988a27479a861477050ae4ac03523413295edb967e22b4c73d9489c8852444e39d0f5e16a44b88858a4a

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000022e4c-127.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections