General

  • Target

    n3413611.exe

  • Size

    172KB

  • MD5

    a1c5fdcdc7b6222b1101314166b1282a

  • SHA1

    771677288c29ff95239453f1dd780e4b2bc91c22

  • SHA256

    561b502c9ac4e14617d6ee34a1ff7875724ec44215785b05febe644085fac826

  • SHA512

    01bd493842595048e86ad24b1c3c53308d27bfcee68763032eb00777f0cf3c9e44c61cf33b8800801ab1eadfd3b11fb50099a1ab36a5f215f0f3b2cd920f7ab4

  • SSDEEP

    1536:4KtjJ36sv0W7TkVHNrHV85pHXv5BExxNIiYQ7zbuB9bS3HgZQ0GkRQ8e8h9:XJnq385BBBExxN86H3AZQz8e8h9

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

naher

C2

77.91.68.48:19071

Attributes
  • auth_value

    62708e72becb72a24cf8843b46acc6a1

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • n3413611.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections