General

  • Target

    0x0007000000015c17-232.dat

  • Size

    145KB

  • MD5

    c65c28325cce7de424ea5e6d4bb9a2d7

  • SHA1

    c8dc4d9d8382faeec3e597e613c54dbb8b217e9c

  • SHA256

    98a80c7b22d1d05c2b1caad4a12b4ae25c7992a7a0b68a3ca79b43937de3099f

  • SHA512

    138cd17fbead885312b085f39ee9571f374ddfa964cb1409383355a4281d1d4094987530f5797b8a5974186c643079903b8ff671523285c267f49937e4271fbe

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000015c17-232.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections