General

  • Target

    f4ed260a6a06037c9d7fe4ede8d614e692fac47aca3269011acc8bb9582fe3e0.zip

  • Size

    51KB

  • MD5

    5591d9603fa62a27c63371c24fd1d510

  • SHA1

    e0d11204d4c93b02881fb8ef7592e738ce137fc6

  • SHA256

    96e6c3b2c86f7c3b1a81bfa49869caafce3ae03ccd77050a5bc9c2e8070b0690

  • SHA512

    980fbacb3a19df4144ff90a2f40fcb4c272df3d5e9e11ba20aa7ca8543d783c75b86da0e51fbcdad7fea57f173c5571046b133536101e638298b9cb6ada19a0c

  • SSDEEP

    1536:RouPTlWk9khAqTlF+wBqIKnRF/crbTIxj:R3PJWkq5JF+wIL0rbGj

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Signatures

Files

  • f4ed260a6a06037c9d7fe4ede8d614e692fac47aca3269011acc8bb9582fe3e0.zip
    .zip

    Password: infected

  • f4ed260a6a06037c9d7fe4ede8d614e692fac47aca3269011acc8bb9582fe3e0
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections