Overview

overview

10

Static

static

10

3970926bf1...22.exe

windows7-x64

10

3970926bf1...22.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3970926bf1346686f87a381fa1aabf6d2110aaa5f3f0a2c3e73af1c58136db22.zip

  • Size

    64KB

  • MD5

    b111d74918b1db80396d4599f2bdf917

  • SHA1

    cedff8750b242c11c419c8601e93facbd3f3cd71

  • SHA256

    b69841573141cbc91cc25b332d6fe54a41c3758b1b176f0164316c52b64d1d25

  • SHA512

    3949499547187be02a8b915902cd523594f7f5cbabb66996f6e2d66d7a532e7387ca31844cdb0d95baa3c8c7b6f17bfc72f215f878cf7a0016631028f0832e61

  • SSDEEP

    1536:wT2RiMJsSHdnnTpEIBAx7Vz8OL7PM1qoUWGASn11:wT2RTySxCIBAsOvPf4bSH

Score
10/10
ditroredline

Malware Config

Extracted

Family

redline

Botnet

ditro

C2

217.196.96.101:4132

Attributes
  • auth_value

    8f24ed370a9b24aa28d3d634ea57912e

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3970926bf1346686f87a381fa1aabf6d2110aaa5f3f0a2c3e73af1c58136db22.zip
    .zip

    Password: infected

  • 3970926bf1346686f87a381fa1aabf6d2110aaa5f3f0a2c3e73af1c58136db22
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections