General

  • Target

    0x00070000000132ef-117.dat

  • Size

    168KB

  • MD5

    058549c6c452e018f59a7cabd2296d1f

  • SHA1

    0064f2651846e81e3873b73aeee4b0893e175c94

  • SHA256

    160db5d77fc158a58891fd0ff4a79e9a7fa7a10b0686d6ff2b4bb4826852ad84

  • SHA512

    e10b624ca5ab3a2c30c0cd3543e8cb4506fb45e7b716ff92014c9017b6e6393e1b8bafcd4b903792497aecd8b529be0f4b8ca8fe406a82cb5e343894f42a834f

  • SSDEEP

    3072:8kmfv4r8W2qTvI2t2qVwoMTOIkvl98e8hg:gfvhZ/Rfkvl9

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mixa

C2

185.161.248.75:4132

Attributes
  • auth_value

    9d14534b25ac495ab25b59800acf3bb2

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000132ef-117.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections