General

  • Target

    0x00080000000122ed-116.dat

  • Size

    145KB

  • MD5

    a9d720bc539201de83cc4c7123899986

  • SHA1

    2383da8e0a8593c23866c348bc51764192957104

  • SHA256

    34c700463317e3ce8646c2ab1c3e97c949d4127b25953d5087ee588c29b064af

  • SHA512

    371f36f07a671ebc2248c7f4116d868136dd2982b5e70d042b2b36719ad3da433bad82b2b2d852fb75d6fa39be63ea55c1a0749dd3cf3d2db826de2da3ba9962

  • SSDEEP

    3072:5V+m5cVQmRSxIEN1MjdVti90hSZ18e8h4:5j49k90hSP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

larry

C2

185.161.248.75:4132

Attributes
  • auth_value

    9039557bb7a08f5f2f60e2b71e1dee0e

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00080000000122ed-116.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections