Overview

overview

10

Static

static

10

d6a9251a12...b8.exe

windows7-x64

10

d6a9251a12...b8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d6a9251a1248f43646004485d3a0326ca4c0ef3edc5e33ddfd606b601d175bb8.zip

  • Size

    64KB

  • MD5

    bd0ccd7fab9d40824cc4c3c83694a168

  • SHA1

    3b3daa6b5c3a1503dc438e1a986d68b08850ea91

  • SHA256

    deae276b0d1e1944268042623e18ba4853b2670d3a7743c67e9c4dbb94831afc

  • SHA512

    ef220a492e79e48e2a076dbc9a732354f3928424d37d9c8204a3fa0da0bb20b3c600e0b510d997eb71e37b3ed4684fc23235bbf87707f5e443f1e00f644c41a0

  • SSDEEP

    1536:zzwor+IrwuyX6PBWu7bindNnABpEXIMxsrojOT:oPybyXFu7+fnABCIMDM

Score
10/10
laguredline

Malware Config

Extracted

Family

redline

Botnet

lagu

C2

217.196.96.101:4132

Attributes
  • auth_value

    8c4969092a4e18461b2347c0aa54b6a5

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6a9251a1248f43646004485d3a0326ca4c0ef3edc5e33ddfd606b601d175bb8.zip
    .zip

    Password: infected

  • d6a9251a1248f43646004485d3a0326ca4c0ef3edc5e33ddfd606b601d175bb8
    .exe windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections