General

  • Target

    683c7f7cc55431509dc5436df28ff2b3ca82563025ce8a258fecfa700623908c.zip

  • Size

    51KB

  • MD5

    b13b8cc31726e0b725e321b3ca545e67

  • SHA1

    c16b4e3b217d7f49dec1682926f0c55a42119e8f

  • SHA256

    21caff50453e46fae78c4d684f24bb13ef8846d93659592b4c3cb9cba202a1cd

  • SHA512

    8dca5ac062cc8e9b1e1d6aeeb2731181c91c9be5248fe3111b85a372eec903819ab13ef234a004b06142b4b793a9eae689373ecd8907846df4055711e7bfd5ef

  • SSDEEP

    1536:LdouPTlWk9khAqTlF+wBqIKnRF/crbTIxRE:Ld3PJWkq5JF+wIL0rbGRE

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Signatures

Files

  • 683c7f7cc55431509dc5436df28ff2b3ca82563025ce8a258fecfa700623908c.zip
    .zip

    Password: infected

  • 683c7f7cc55431509dc5436df28ff2b3ca82563025ce8a258fecfa700623908c
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections