General

  • Target

    i7762696.exe

  • Size

    172KB

  • MD5

    08b6219a105f41f8b3b4f0f2b7fcc0b4

  • SHA1

    5743583b93a40949ccedc8043bfe2b16c18d9629

  • SHA256

    be0ce268fed121bc944a1b8fadf8c1987adca092d2bbde88e4f70960dd8021ec

  • SHA512

    c4df8ab68d1fb2e8b6a9470252b47443c99cbe68e5b7100f5082afb2c53212cb2a61bec0c3d254b06a3413fa108633c93d77b3996601556f7443b0cfaeba530c

  • SSDEEP

    1536:4KtjJ36sv0W7TkVHNrHV85pHXv5BExxNIiYQ7zbuB9bS3HgZQ0GkRQ8e8h9:XJnq385BBBExxN86H3AZQz8e8h9

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

naher

C2

77.91.68.48:19071

Attributes
  • auth_value

    62708e72becb72a24cf8843b46acc6a1

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i7762696.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections