Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    n1238762.exe

  • Size

    173KB

  • MD5

    cc01e1d4457c6c651686dddff76e2d7b

  • SHA1

    551671799e2f621c681409de6c3744ef8bed3546

  • SHA256

    b230e5dd03167e4c161796203d2d4ea3b84969b64f11bd17fc8791646b4a72dd

  • SHA512

    13ffee4863d201d930b98513be691fcc2a2deb08bbe96f8d70ad00c2a547f13b83bb2c06b7a58359c52efcfe3e1f07714a4e5d8bc8779b22975ed4ec81cdbda0

  • SSDEEP

    3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR

Score
10/10
duginredline

Malware Config

Extracted

Family

redline

Botnet

dugin

C2

77.91.124.73:19071

Attributes
  • auth_value

    7c3e46e091100fd26a6076996d374c28

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • n1238762.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections