General

  • Target

    465325a3ebd9890234c2829cbb4cf3ca29f7591eb64b5bb21a1e4834410bd0b2.zip

  • Size

    51KB

  • MD5

    7df5301381135a1bd18528a423f45084

  • SHA1

    fc91fbf486d1c6ddce73c408376631ec2513d319

  • SHA256

    f8dae4a90a7356e1dee7af8f46b7438884a5b30fd27b8026427a3ad3caaf8162

  • SHA512

    065d078e040786b12cdfd2e25fd1fe5f52d613f97f330a8d9a6a9a3a322ca1178f614dff6fbbecf9d5f693dbef612c76b05a03d08c2c6d35d038774e93b947ff

  • SSDEEP

    1536:4ouPTlWk9khAqTlF+wBqIKnRF/crbTIxk:43PJWkq5JF+wIL0rbGk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Signatures

Files

  • 465325a3ebd9890234c2829cbb4cf3ca29f7591eb64b5bb21a1e4834410bd0b2.zip
    .zip

    Password: infected

  • 465325a3ebd9890234c2829cbb4cf3ca29f7591eb64b5bb21a1e4834410bd0b2
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections