Overview

overview

10

Static

static

10

g2888168.exe

windows7-x64

10

g2888168.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    g2888168.exe

  • Size

    169KB

  • MD5

    f41814da4b3d5f67f82f32b046f3676a

  • SHA1

    b6817b4786846bd0f98553cbf45603783236234d

  • SHA256

    3ac1676fd03728398af6c1f90660832be290b94eff0a0b6a931afc7dc96efccb

  • SHA512

    b35ddc3a2e05a3853f5c056b815a4f58e141d834d24f0e3e97dbc7b2d0721bbe9f4b853baebc35b12b04f9c5392fbd175e87a8b75cb642b00f00f966fa10ef62

  • SSDEEP

    1536:TyqlwNqlVZRGWY8HrIGtRSotDaZIPeKNDETGqVqbuFz1CSwx83wYk/8e8hR:Th6D3GtzD263qVeUESwx58e8hR

Score
10/10
dizaredline

Malware Config

Extracted

Family

redline

Botnet

diza

C2

217.196.96.56:4138

Attributes
  • auth_value

    bbab0d2f0ae4d4fdd6b17077d93b3e80

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • g2888168.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections