Overview

overview

10

Static

static

10

04395199.exe

windows7-x64

10

04395199.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    04395199.dat

  • Size

    172KB

  • MD5

    5bda6eb5a444b01dc3f2668e1416b32f

  • SHA1

    9f77513a67af867cd70bb1e6a9852dbdfec66ba6

  • SHA256

    7e214fffcf367fc5589f85c599bed5c2b6483cb4822a0188e6bfc2154fb7398b

  • SHA512

    3b94a0959574f955aa4a3923d4c0985d2f3e3d00424dde8240a86722e20bbff5e131970955ca628fc8aecea59943f0ed1645bf6f1270ad32a18b07d1a99034cd

  • SSDEEP

    3072:Ea/jxl3pym/cbcryE2vs0xNQm2f9JiIE/ww8e8h1:EaNcwuqbdniIE/ww

Score
10/10
maxiredline

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.129:19068

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04395199.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections