General

  • Target

    0x0007000000023426-53.dat

  • Size

    304KB

  • MD5

    e6782ed1205228282be440748bcc649f

  • SHA1

    c2feb672ee2c8356fbcffd56da8a2ebea4d11f5b

  • SHA256

    bf1cb0316f29ccc9c9d2607ce2206eb50e3300e23b7f147e7b731f4a0e54cfd6

  • SHA512

    0d5dfa0668b0d511e037a9ffb48c95e16cf2d4ceb44120ae23c9ad48683677f8e41667cb6acd76438e18ba085ccff369a34b58cecd5e428eb522ab83012c03b6

  • SSDEEP

    3072:Bq6EgY6iQrUjytA4dwP8Zkc12ZYATA+tAXiQFcZqf7D34teqiOLibBOF:gqY6iAwP6kcQYATAKADFcZqf7DIXL

Malware Config

Extracted

Family

redline

Botnet

Raijin, Mybestdog

C2

51.195.53.197:13914

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0007000000023426-53.dat
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections