Overview

overview

10

Static

static

10

l8412641.exe

windows7-x64

10

l8412641.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    l8412641.exe

  • Size

    145KB

  • MD5

    6d029ca6ce5f44e188b0f6d0f5f98bb6

  • SHA1

    bdb651303a34389914c2756fbaa220eff01c7ebb

  • SHA256

    a504755e40c94c02829bc90ebd97cf20afb802f223a88fcea9b32bddee5d7c76

  • SHA512

    1e22e2c25056d76a1c47a6ea2e7a16448d01dcc0312362b73b3f09e16ddd9608ee1369302e7251049d81c8ae8cf1ec5b29f432c22c7d09c2ddc4a86a610ffc8e

  • SSDEEP

    3072:AV+m5cVQmRSxAX9GYM1vYWr9h/Z28e8hq:Aj4Zyz9h/M

Score
10/10
dogmaredline

Malware Config

Extracted

Family

redline

Botnet

dogma

C2

185.161.248.75:4132

Attributes
  • auth_value

    d6c5d36e9aa03c956dc76aa0fcbe3639

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l8412641.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections