General

  • Target

    146d78afb11499cbe40e4d84a224a1459daaf4af8c55c8cd429953799f1cc5cc.zip

  • Size

    51KB

  • MD5

    fa2f7802c4b3a66c0ddbbd44c4a5bcdb

  • SHA1

    77a1aec2dea4d1a0a91f79d8675ac4a2b2f6c830

  • SHA256

    bcf3984156d429c31022a2d5228f1734689f6d2c616aab8cd0200fac3d69d88e

  • SHA512

    27e6efabc02899c6bbeec447e610e1937d2351b4d8067c962cfc7e2ccfe11dee37d0eb1df47c8ee8c96cefc5faa2da10b4249e23ce2bad94b041b3a7fd02105e

  • SSDEEP

    1536:rouPTlWk9khAqTlF+wBqIKnRF/crbTIxv:r3PJWkq5JF+wIL0rbGv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Signatures

Files

  • 146d78afb11499cbe40e4d84a224a1459daaf4af8c55c8cd429953799f1cc5cc.zip
    .zip

    Password: infected

  • 146d78afb11499cbe40e4d84a224a1459daaf4af8c55c8cd429953799f1cc5cc
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections