General

  • Target

    d34bca193b7fe7e117276f92b5a9df8c.bin

  • Size

    221KB

  • MD5

    d34bca193b7fe7e117276f92b5a9df8c

  • SHA1

    0975086cc00731a887731cc522fdc72be50e18fc

  • SHA256

    48ed6373e6158722aa459eb68fc6012495d6c95f7bf65ef27dfe742689b51df2

  • SHA512

    3b8a3316a54c205fbf6e62449cd098c89df4e150cf0e031f22ec121be08a5468d724990b9b85fbc37bac875fa0314ede64d4d45e1ce1b4d0baabad91f3ae627b

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d34bca193b7fe7e117276f92b5a9df8c.bin
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections