Overview

overview

10

Static

static

10

lr394980.exe

windows7-x64

10

lr394980.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    lr394980.exe

  • Size

    176KB

  • MD5

    cb7c15237018dc6331c99e4c5dc34259

  • SHA1

    6337842c41edf47820ef24ab6dd682bcd8b06d2c

  • SHA256

    76dd3cd9f27b810ed33c1de5c4bfc81a77f848ff6cdec42632e3c23b309f56a4

  • SHA512

    619ff7a205ace325d7fb4ee2c8958ea0d774573fa1b2dbeebc5a0ba2f264429c36c39446694cf657205dba2bd8c8bb7f4e587d20e1c711ba55a804889c45b9c3

  • SSDEEP

    3072:pxqZWzvagwoMR3I58ZlHeR5FthXfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOb:bqZVY8qth

Score
10/10
sporaredline

Malware Config

Extracted

Family

redline

Botnet

spora

C2

176.113.115.145:4125

Attributes
  • auth_value

    441b39ab37774b2ca9931c31e1bc6071

Signatures

Files

  • lr394980.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections