Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    n6209813.exe

  • Size

    174KB

  • MD5

    a447b7e95a1fa4e6bc80da23a4697580

  • SHA1

    0c7703ed004db8f71e7c447f57e9531a0690e00d

  • SHA256

    8e79be4e1060f1105c37d7735c0c28e6968ab8becbe14368175ae5846a7dd0c2

  • SHA512

    cfcd0ae5a62571feb85e756812cebbdccad813134e7ce5b5a31676f87892c81de2c596b5ddecd1d3e8959b0aada8e9c924ad17cf2dcb10fe2dca59ddef24e9c1

  • SSDEEP

    1536:4KtjJ36sv0W7TkVHNrHV85pHXv5BExxNIiYQ7zbuB9bS3HgZQ0GkRQ8e8h9:XJnq385BBBExxN86H3AZQz8e8h9

Score
10/10
naherredline

Malware Config

Extracted

Family

redline

Botnet

naher

C2

77.91.68.48:19071

Attributes
  • auth_value

    62708e72becb72a24cf8843b46acc6a1

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • n6209813.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections