General

  • Target

    0x0006000000016cfc-188.dat

  • Size

    222KB

  • MD5

    f6deff9d0607cc3709f57e82b8751d6c

  • SHA1

    7c219e40d81ffd8ba923e8ff0c3488c9ce3220e4

  • SHA256

    f7ee194788eb76f820474674bb3b2a0c7a89406be666ce593e1bab75ea9fc639

  • SHA512

    5a2ea2b3afc80594ce4ed5d2c825b73e3c368816f931841f896a5dc4e70fe22f620072941912c59e36d907f12418c9ecaec93f5eef790532f03aea2eacc55cfe

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000016cfc-188.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections