General

  • Target

    0x0006000000016adb-153.dat

  • Size

    222KB

  • MD5

    2307761d596c6eb4e6e34080c1bd5d10

  • SHA1

    f9896b1cb2e618c57c746c0b3aa5c53253f592a2

  • SHA256

    300a1669b1311dc3f3bdcce453a0301529905b38be5850f410c53fe3cb3f4375

  • SHA512

    489cbed48e185f1375a9c589da7c6e7e9544bed34a2ba035e168d4cd1a0c3ffcdbe8466e17e59f5dce1e6864511785ff03a6bd53f98259e0e3f44f406456516d

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000016adb-153.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections