General

  • Target

    5fb931db82ee321d0d67fc476038426987b3f1a6912f2fad55da90709cd2e210.zip

  • Size

    51KB

  • MD5

    3b7692535cf74f8dde76d322a1d66676

  • SHA1

    599f3bea0c34ac7273bd1c66b246991fd0991393

  • SHA256

    30300aa0779ea71d9d4cd223e82cba38368621c11040baf3c9fb0d9015712a57

  • SHA512

    c9ff9af7f30ed64afefade0d5e46e68e99904f0a075ea67b99d44208bc5031698e5450b480cf8979d31a69e6910bf232919dfc9a4d60c1c5bf5ce51fcbda530e

  • SSDEEP

    1536:aouPTlWk9khAqTlF+wBqIKnRF/crbTIxj:a3PJWkq5JF+wIL0rbGj

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Signatures

Files

  • 5fb931db82ee321d0d67fc476038426987b3f1a6912f2fad55da90709cd2e210.zip
    .zip

    Password: infected

  • 5fb931db82ee321d0d67fc476038426987b3f1a6912f2fad55da90709cd2e210
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections