General

  • Target

    0dcb7f44095aa1afbaf134b107d8efd1.bin

  • Size

    50KB

  • MD5

    5375e4d64d7567ad02561953fd4ed840

  • SHA1

    0f195d62483d5a7060e299fb024f8e0a8ad72e9a

  • SHA256

    451c729e0e6a1f45c6ea51a95ff9bee4b5cb1dbb2e8c8ef635f66d652d681cfd

  • SHA512

    d69cfd06c3111fbbe11b5c43c4eeb4e1b86ac3eccc25a9687af0d8ebccb36af162268a478ad031307c2827da763d7c1c1e05b5945353b03cff0fde607554b367

  • SSDEEP

    1536:WNAaun8ek2ZaQwmEgw84spVLB5wz5DYr5ZZSG9vsg:uAaun872ZHwmEPc5y5kNZZSG9vv

Malware Config

Extracted

Family

redline

Botnet

@avangardow_krutim

C2

168.119.228.126:11552

Attributes
  • auth_value

    7d477650adea2e459a346ec55a0c86ff

Signatures

Files

  • 0dcb7f44095aa1afbaf134b107d8efd1.bin
    .zip

    Password: infected

  • 2f2b059f28121a74d3d56189c02692387e5c0469f89ad091ee49a1eebce92cc2.exe
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections