Overview

overview

10

Static

static

10

53c8df0fb2...f5.exe

windows7-x64

10

53c8df0fb2...f5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    53c8df0fb23706e6c46d26031d24ae6afc279494146583330cb29f21b51e78f5.zip

  • Size

    64KB

  • MD5

    792c76682c4f5fe295568660fd633ddf

  • SHA1

    ce0c7d8bb35b65a23f0626e01f31445c6a637469

  • SHA256

    8ddd0674022d742d6198ee587c00f27df8a1ec06526efbfb770535c84b624e0f

  • SHA512

    a3b5ea80ad48179eaeebf94b9c9968e763f165d9b33ef3f8007b8de22deee3558225a9e03d38ef25e43b73da92aa2e6cc7f3968bf3b4786b2253350c229cdab5

  • SSDEEP

    1536:Yzwor+IrwuyX6PBWu7bindNnABpEXIMxsroj8:nPybyXFu7+fnABCIMD8

Score
10/10
laguredline

Malware Config

Extracted

Family

redline

Botnet

lagu

C2

217.196.96.101:4132

Attributes
  • auth_value

    8c4969092a4e18461b2347c0aa54b6a5

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 53c8df0fb23706e6c46d26031d24ae6afc279494146583330cb29f21b51e78f5.zip
    .zip

    Password: infected

  • 53c8df0fb23706e6c46d26031d24ae6afc279494146583330cb29f21b51e78f5
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections