Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    i5988597.exe

  • Size

    173KB

  • MD5

    a74dcbb379d678ae6af89267c6fc8dfe

  • SHA1

    bb905433d719ac6103520c24e4e1abd304ff58a2

  • SHA256

    93357c03b04e54a5a4e62d269a10fff123719dc96c8a9daaed35c8e654ac22cb

  • SHA512

    04340279c6fdcb336b11cd8d6d7ad0d75f662b1a1b17c02e1db4248a6502d4d3de4ce683a4b4e3d5ecddb057e530abacc83e9a54d2be203ec60fb03b6aab6e34

  • SSDEEP

    1536:4KtjJ36sv0W7TkVHNrHV85pHXv5BExxNIiYQ7zbuB9bS3HgZQ0GkRQ8e8h9:XJnq385BBBExxN86H3AZQz8e8h9

Score
10/10
naherredline

Malware Config

Extracted

Family

redline

Botnet

naher

C2

77.91.68.48:19071

Attributes
  • auth_value

    62708e72becb72a24cf8843b46acc6a1

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • i5988597.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections