Overview

overview

10

Static

static

10

0b076c12e0...25.exe

windows7-x64

10

0b076c12e0...25.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b076c12e087e9d4bf90242dfc046f50bdfe142ef8c8498cddbc3bd3c8ec9c25.zip

  • Size

    64KB

  • MD5

    633b0e7d47e925140bc06a03d5dc139f

  • SHA1

    fcda5e76715fe73a3f18c5c694dcb275770f38bd

  • SHA256

    b8af75d5bfc63b677adcc2dc992743ca686eebcfe71fa420ff20500b8ef1cdc4

  • SHA512

    4b990bc52ca02d07c9ab87eac49bcae644dbb122d70d7eff4537a2b408f83bff57433d6c30bd3c5e02bb772205e8083f948e0589f9327ba6d5d5decc0234b046

  • SSDEEP

    1536:yzwor+IrwuyX6PBWu7bindNnABpEXIMxsrojn:hPybyXFu7+fnABCIMDn

Score
10/10
laguredline

Malware Config

Extracted

Family

redline

Botnet

lagu

C2

217.196.96.101:4132

Attributes
  • auth_value

    8c4969092a4e18461b2347c0aa54b6a5

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b076c12e087e9d4bf90242dfc046f50bdfe142ef8c8498cddbc3bd3c8ec9c25.zip
    .zip

    Password: infected

  • 0b076c12e087e9d4bf90242dfc046f50bdfe142ef8c8498cddbc3bd3c8ec9c25
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections