General

  • Target

    tmp

  • Size

    175KB

  • MD5

    ed98d89ee3ff45670756e8dda4345b62

  • SHA1

    d8cef7e32b2261447f3e53617a1d53647e4dae6d

  • SHA256

    18b11eae56eaa7b76512c5e88aae06fda4faebbd477c01e837f5ca1b3ffd1985

  • SHA512

    7d89e36c3b79f4862da2f4a39c29b96c125b72a94e2ac2e01a1327f2930d04bfaa853abbab789dfd2b8e9de8105c943731da838ea9efb2d9133292304297058a

  • SSDEEP

    3072:KxqZWJBaKULo3xj9peT5FGhMXxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuw+O:4qZIxjeGh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gonka

C2

62.204.41.170:4179

Attributes
  • auth_value

    f017b1096da5cc257f8ca109051c5fbb

Signatures

Files

  • tmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections