General

  • Target

    0x00070000000133e2-120.dat

  • Size

    172KB

  • MD5

    ab0b786ee7df440eef8bd62d7908ff2d

  • SHA1

    c63c666e1372f353c43144f85c9ec4bd66bd7ccb

  • SHA256

    d2d3271df78df02a17354adea8cda8f0dea5987ece9fcb440c6291ebf58e3564

  • SHA512

    21f203b63001074fdbed27e4aff8f4b3b2f528b393a61e7bc62574f4759eb2c1e0c8aef8be93a2445452b271d844114925f5d284abb9dcda3a3fcc0a33364a9e

  • SSDEEP

    3072:OyJKOMaGT7QMNzr4xNqq3M+Lr7N5Q8e8hH:OyJRWsMxxkRr7N5Q

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luza

C2

83.97.73.129:19071

Attributes
  • auth_value

    1261701914d508e02e8b4f25d38bc7f9

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x00070000000133e2-120.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections