General

  • Target

    bc6ec2bf638faa5d5ceedc2e21cf5dec.bin

  • Size

    173KB

  • MD5

    bc6ec2bf638faa5d5ceedc2e21cf5dec

  • SHA1

    b89bcf06374aedc314457fa402b6543c1596b805

  • SHA256

    de4e60553c2e37ac6ffa79f9e97a40865df6c4aa0844d10f6a3cea740ce406d8

  • SHA512

    0b47116d7524248b91e30799620ad2626248acbfded08d89697e13ef04d195ae09e16baac49ff5171ccb62d9d55fad6e268a533078426ce8760d82cd024d68ae

  • SSDEEP

    3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nasa

C2

77.91.68.68:19071

Attributes
  • auth_value

    6da71218d8a9738ea3a9a78b5677589b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bc6ec2bf638faa5d5ceedc2e21cf5dec.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections