General

  • Target

    0x00050000000186d1-153.dat

  • Size

    219KB

  • MD5

    2d24e846f08f832f5916e8d382ebc287

  • SHA1

    477141fb9fac22f66290d63503c8b43ca0095972

  • SHA256

    70e702854638a25690b97ab24f5a1f2e210a216169069677563cc92f66e885b4

  • SHA512

    e189683a423a215f95fe62b4e775cc917c49f8f3dcaebc20db0c100760f3552c5fd38532f09d2ee1206271f9c44c748f8cebbb885e603efa96e99fef83a3fb00

  • SSDEEP

    6144:neT7M7zNgcEgkrbVNurQ+9/Ac0NV1SE561FJ:QCNgcEjryV4cA561FJ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kedru

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00050000000186d1-153.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections