General

  • Target

    l26xk25.exe

  • Size

    175KB

  • MD5

    6c4c2a56d5dd785adbe4fe60fa3cc1f2

  • SHA1

    f8bd4379310258f8e54c47b56f5eec7394adb9a2

  • SHA256

    b182f2d3d49bdda2e29a0ed312deef4bee03983de54080c5e97ad6422de192d2

  • SHA512

    f6958cab80e2f7736cea307b51be546e50acd5494b72db0343a09e6ef8c446114f51be6c9826fcb6e9f7190e4ec8415c0a403c3c1706183577c2604b877ff830

  • SSDEEP

    3072:PxqZWN9abUP0Pv3EIye7597h4HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwM:5qZ5v3fV7h

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

ruka

C2

193.233.20.28:4125

Attributes
  • auth_value

    5d1d0e51ebe1e3f16cca573ff651c43c

Signatures

Files

  • l26xk25.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections