Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    n3146670.exe

  • Size

    172KB

  • MD5

    f9e620c7d92c76ff8fa31eeb8248c00c

  • SHA1

    d3fb50b06f660ffff21e1ef45c224e9d4582c131

  • SHA256

    279f6b906a2af12856a92d31ce0a8fd1e7f7ddad770960eada1dcb41a7856b2b

  • SHA512

    e4ab802b9b0997749495e30a6777afe4dd6d4f64d330fc311d5dd3e939359aae259233f4236933057ff40ef0840d97b4830fd36dd257ed8a12bf8e58d27b4809

  • SSDEEP

    1536:4KtjJ36sv0W7TkVHNrHV85pHXv5BExxNIiYQ7zbuB9bS3HgZQ0GkRQ8e8h9:XJnq385BBBExxN86H3AZQz8e8h9

Score
10/10
naherredline

Malware Config

Extracted

Family

redline

Botnet

naher

C2

77.91.68.48:19071

Attributes
  • auth_value

    62708e72becb72a24cf8843b46acc6a1

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • n3146670.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections