Overview

overview

10

Static

static

10

dridex

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b3b8813cad74d4e8e0adb95d2fee5b94f38859ea62ce2f0d4558e279101e8712

  • Size

    127KB

  • MD5

    5d38aede0d5846ef5637db30b43eca60

  • SHA1

    092fcf0a4a44777a096afefe4e10ad4f31dc4939

  • SHA256

    b3b8813cad74d4e8e0adb95d2fee5b94f38859ea62ce2f0d4558e279101e8712

  • SHA512

    d0bbed5a549f37aa71c8e9033fa181c5928d07c204cf8e05366393e1380147086a0bd2bf1c4b10b97ebf4e578463b726b1e685e616320d38df6822d65e74dd94

  • SSDEEP

    1536:uaPcnVHT1K/oA+Jcc+fvPIUM1ibz8VkpzYhWj9JbV7t/ZPCasYgibfbFDKsRD:bPcZZPK3PI11mEsx7BgYgafJlD

Score
10/10
nalimsuchkaredline

Malware Config

Extracted

Family

redline

Botnet

nalimsuchka

C2

104.211.55.2:80

Attributes
  • auth_value

    f511a51230fb90d33f6b635d2873478c

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b3b8813cad74d4e8e0adb95d2fee5b94f38859ea62ce2f0d4558e279101e8712
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections