Overview

overview

10

Static

static

10

l5871176.exe

windows7-x64

10

l5871176.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    l5871176.exe

  • Size

    145KB

  • MD5

    131cbfde72aaa11b4b86a28edc118f3e

  • SHA1

    22363f1cf0813af05ced3a2a73592a729fbf5677

  • SHA256

    cbbad34b645e19c6f7ee84c5f87e2f35938a18b3f599a8fa1f81346cd4a63d3a

  • SHA512

    88d5c991ee2b1b1102a3b5c52383ee566ddfab04606e80de30828eb0bb04acfb9172c7ae6f44bb73f05dc0bd64956edf6ff55662a90594d96e3224c5727185d5

  • SSDEEP

    3072:FV+m5cbQmRSNB4+/zMUH09RhvZi8e8ha:FjSCiRhv4

Score
10/10
destoredline

Malware Config

Extracted

Family

redline

Botnet

desto

C2

185.161.248.75:4132

Attributes
  • auth_value

    9170d4ae7d11eaa24684a71b73bf9c86

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l5871176.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections