Overview

overview

10

Static

static

10

thon.exe

windows7-x64

10

thon.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    thon.exe

  • Size

    172KB

  • MD5

    de3aea901d864c50c1106b81c56df026

  • SHA1

    3c7f61b5ed3320f7cb1953d3a79c1cfabbdce52d

  • SHA256

    4dac5a38615fb699136a2bc8a494fbe8caad833057396930989be549b885b25b

  • SHA512

    fdbd1be3e9869f49558f9f693d8d58f414fa4f0b2ea973ea1c8622372c030118912f7caacbad90a47188c43ee6561087c6f71dedd10d40f415c011c9d8027d74

  • SSDEEP

    3072:xULxZzmK0jynQxwxN2OSPZyKwgX8e8hD:aLujFxZ90KwgX

Score
10/10
@tentetherredline

Malware Config

Extracted

Family

redline

Botnet

@TenTether

C2

66.70.247.26:44193

Attributes
  • auth_value

    d17e5cade8fa54e87def5e9811e274e7

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • thon.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections