Overview

overview

10

Static

static

10

l3869407.exe

windows7-x64

10

l3869407.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    l3869407.exe

  • Size

    168KB

  • MD5

    e94c064e2e957c79e3027e0e8e90dd20

  • SHA1

    a45ac4103c70e082699d843d405d650b827b26e8

  • SHA256

    149b5724a4f47eb0bf76b6976d7fd8bca1bf1296e71bf974a16ec612448f20ff

  • SHA512

    c2b9a41ad92cbdc9ff088890f3df645c0598bd98f11cc4ed7ef8a2605e5f0fdfa6de820b91e52c237e65b38cbc579c37040aa103170550d35442a6fd6cd21c8e

  • SSDEEP

    1536:VyWq6qlVZRGW9eh5raYkjFbq7VrM8KOYjYTGqVibuF1JR5pYcceq83wYkv8e8h7:QftEmXFqV28npYcceqh8e8h7

Score
10/10
dionredline

Malware Config

Extracted

Family

redline

Botnet

dion

C2

217.196.96.101:4132

Attributes
  • auth_value

    6e0b6a3255923968b15f61a2c040c5c9

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l3869407.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections