General

  • Target

    25f567e62b27d72849b73f24e65cfb9bc5793764d19c843479764b22b7c73a71.zip

  • Size

    51KB

  • MD5

    51a1eb7bf592c9776b67120418517182

  • SHA1

    b70632a5e3bb6eac57b3f40d8f01ef25c9c3b067

  • SHA256

    9e01592edb10fb81012a19551990045630f1952c917ec907ebc23a71a1758eb6

  • SHA512

    73b43c118ec14073a3935b4659445be715a0a39597dc03eb414b81f42413f2f654bdc9d055620937ec540c5162182fb8a19927dcc98f1e2c4fe17a5d3eae6c88

  • SSDEEP

    768:jZSH2X/xQNhidcOtA4kADfLN++WQYdo+zwJ76+X2UhPzVA947eGriqkCcFm:jZSWX/EVRQYdo+sX9hyO7eLjCcY

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

netu

C2

193.233.20.32:4125

Attributes
  • auth_value

    9641925ae487005582b5cf30476dd305

Signatures

Files

  • 25f567e62b27d72849b73f24e65cfb9bc5793764d19c843479764b22b7c73a71.zip
    .zip

    Password: infected

  • 25f567e62b27d72849b73f24e65cfb9bc5793764d19c843479764b22b7c73a71
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections