Overview

overview

10

Static

static

10

0x00080000...72.exe

windows7-x64

10

0x00080000...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000800000002332f-772.dat

  • Size

    300KB

  • MD5

    255e3b30fb239e20c9441ce9e89169fd

  • SHA1

    db8de3bd096af87b912517f6ac88eaf7ff87301e

  • SHA256

    b839a06030277c44e842557ceb98ff7e06861b93c0922c61b47bd45bcf208408

  • SHA512

    a792082aac473237e0ff5750d5ef4bf3cb63cfd655921e40c96b8b25dd496163c1bc6a70719541bf2253b13506c3e8bfa22dc585932f00656f0c5a7ec9622f0a

  • SSDEEP

    3072:22JLXfYoQk+nJLMbI7NKeiZixKMD4UydbXcnDaAxKR5AgkVMRqT6Dv/YCeqiOL2P:7NbIEn1bMZxKPAXVMRqT6D4QL

Score
10/10
@pixeliveredline

Malware Config

Extracted

Family

redline

Botnet

@Pixelive

C2

195.20.16.103:20440

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000800000002332f-772.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections