Overview

overview

10

Static

static

10

f0212973.exe

windows7-x64

10

f0212973.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0212973.exe

  • Size

    145KB

  • MD5

    a1f6de1ffeb80cbf9fe4b473d4af2168

  • SHA1

    a52fb148e2cd18e2bf5b59e1089c018cb8a57487

  • SHA256

    4d709cd04ea413e3cfa64351dcbcfae2f769869c565ebc40e108c90bbecfd6c2

  • SHA512

    87338911506576d6743b4609fc2382969e907487b0760feb7a89f8231c901f0d00a0a84dbb54794855ae96d1f6d21333aa2526458636e8f123ee6c6c0f932da8

  • SSDEEP

    3072:HV+m5cvQmRSNHo4IxIROIiDhXZx8e8hA:HjGGMlDhXb

Score
10/10
difozredline

Malware Config

Extracted

Family

redline

Botnet

difoz

C2

185.161.248.75:4132

Attributes
  • auth_value

    ee98afda432cdf29ea1dd0464fdc94e6

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0212973.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections