General

  • Target

    0x000c0000000122ee-66.dat

  • Size

    145KB

  • MD5

    e5761f181e221c4a029fa169f3766a94

  • SHA1

    73175ed04161aee5236026eee41ba23664777078

  • SHA256

    262f7601489a81beb8d3551d2425b7c2f080563a10877174024b40a6e44b2925

  • SHA512

    9da95af2d5031856cd3b01295acefa097aa2198c42d4ce50b8b9cf846e537993fcfcfe30c3db24a54745e5cb523205f4447802894578c0e43fac775936fc4f38

  • SSDEEP

    3072:YV+m5cnQmRSdVx7oW/sk8dV2chWZC8e8hC:YjeSxkkchWI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

GOVNISH

C2

94.142.138.219:20936

Attributes
  • auth_value

    3724ec7b213c9f4bd81d275dd597a33d

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000c0000000122ee-66.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections