General
-
Target
3dbf560bde6b08a3b0bcde193121dd66a7e46e4ec0b9320054c6469d45c06bed
-
Size
172KB
-
MD5
216a9b6f2e4fda61b33f00b5540ad4c9
-
SHA1
c1c3142bc9fa0e3cd75cb018e8e17473f96ca4ea
-
SHA256
3dbf560bde6b08a3b0bcde193121dd66a7e46e4ec0b9320054c6469d45c06bed
-
SHA512
1f973760b81b7a9a28308e6dfc153481532d3ccb7854b77c824bb154594512c3ee7a11acea82325507b32990ecfbec3fc55b814af3768d5a5dc2605b70b47736
-
SSDEEP
1536:PhADkhez36sv0W7TXL0jrHCOXiyfiLhwxNPlYQPnbufbTRGFZ/Xh0GkRf8e8hs:+YwJ7hOXiqkhwxN2iGFGFZ/Xh88e8hs
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
joker
C2
83.97.73.130:19061
Attributes
-
auth_value
a98d303cc28bb3b32a23c59214ae3bc0
Signatures
-
Detects executables packed with ConfuserEx Mod 1 IoCs
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3dbf560bde6b08a3b0bcde193121dd66a7e46e4ec0b9320054c6469d45c06bed
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections