General

  • Target

    0812f6856b35c54ebb1a484c867d4ae03d021e542beae5c43abf3fa455cdf04e.zip

  • Size

    51KB

  • MD5

    2b45c7b3a7a61b6f6a9ed762142f828e

  • SHA1

    10d523a59d7c44e169cf0602242e727a7ec571d8

  • SHA256

    0faf4c1907373149d0799580f52aab5345de79ec03b7e19f54262bef3fe1cf04

  • SHA512

    2a1e9cf43b48c6fbf10e07b2460da0dc4f1c705abfd861c3c122b599647d2b40e3d0ef072dea57a70b0a2ece1e81e1950efe8414b954a8c6aae09421adf5a545

  • SSDEEP

    1536:mzqji9WNuVHbtJMvGvdrLg8i9jzrY/27hORda:mzZ6udbtJMGN3i9Pl4Rda

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

luza

C2

176.113.115.145:4125

Attributes
  • auth_value

    1261701914d508e02e8b4f25d38bc7f9

Signatures

Files

  • 0812f6856b35c54ebb1a484c867d4ae03d021e542beae5c43abf3fa455cdf04e.zip
    .zip

    Password: infected

  • 0812f6856b35c54ebb1a484c867d4ae03d021e542beae5c43abf3fa455cdf04e
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections