Overview

overview

10

Static

static

10

f8143088.exe

windows7-x64

10

f8143088.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8143088.exe

  • Size

    145KB

  • MD5

    2c210d5516c4e71250440737cbc40b6a

  • SHA1

    ec71d7be014a0a4ea1bc64b8bd5df3f2cc3a3f01

  • SHA256

    1ce4f3e882da50fe26f3bf2a9ee49b18ccad6f3fec9236501cb80c4491d8d5f9

  • SHA512

    2ceb1abac6be679ea6f403b9ecbf5a36d4343e5ea4f4a0ef9df3ed9d22974c6a104142d6158a6302f61281309b3b1c7dffee647f98fade98930048b6da9727d9

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Score
10/10
dogmaredline

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8143088.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections