Overview

overview

10

Static

static

10

20d0b641a6...5a.exe

windows7-x64

10

20d0b641a6...5a.exe

windows10-2004-x64

10

Resubmissions

29/10/2024, 11:38

241029-nryabswmbr 10

29/03/2023, 15:16

230329-snl54sgg82 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    20d0b641a626059f2d84ece98e35ba71b7f023d49c6337e649a84f80b4d32a5a.zip

  • Size

    51KB

  • MD5

    86fda95d5af4dca70f07d4698eb12f5d

  • SHA1

    051b9173b86125876b95f092c1f3eef1a38fcb39

  • SHA256

    a141e29ea0db9b828a0876b2db85d4f8bb1633cb621e6df7b59d4fd03a92b283

  • SHA512

    65c3e9a3e42a8fd238af550e031cfea89e0a960a5b76a47dc60dc33868076c7af850cd5c2870745b940622c7812fed1721d099a7c23cad263f8897d4ddc2c418

  • SSDEEP

    1536:xouPTlWk9khAqTlF+wBqIKnRF/crbTIxW:x3PJWkq5JF+wIL0rbGW

Score
10/10
nadoredline

Malware Config

Extracted

Family

redline

Botnet

nado

C2

176.113.115.145:4125

Attributes
  • auth_value

    a648e365d8e0df895a84152ad68ffc56

Signatures

Files

  • 20d0b641a626059f2d84ece98e35ba71b7f023d49c6337e649a84f80b4d32a5a.zip
    .zip

    Password: infected

  • 20d0b641a626059f2d84ece98e35ba71b7f023d49c6337e649a84f80b4d32a5a
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections