Overview

overview

10

Static

static

10

l9988682.exe

windows7-x64

10

l9988682.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    l9988682.exe

  • Size

    145KB

  • MD5

    a660352b2c622970a5abeb0f9905f08f

  • SHA1

    0b7858f517837ebdc0e6c852fc19cd22b09f9537

  • SHA256

    0de9ee6ad782c2e42a05f981127a735e18f7c2a7d841fbe6a8254c09c0eaf39e

  • SHA512

    a65882fd6badbb73706ab5e5b6032c839f2b4e6d4b81a39dd6700ba745017e6b271e2e5523000e0e5c8c3de69d16ebfe738f2d495b4b035c4c8e461a4e3f39ae

  • SSDEEP

    3072:UV+m5crQmRSR38jQ50LiZzq6/hCZx8e8hG:UjCZVLq/hCr

Score
10/10
duraredline

Malware Config

Extracted

Family

redline

Botnet

dura

C2

83.97.73.127:19062

Attributes
  • auth_value

    44b7d6fb9572dea0d64d018139c3d208

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l9988682.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections