Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    o0978522.exe

  • Size

    174KB

  • MD5

    fd24d51c192be366c1e8cd06b6da81f2

  • SHA1

    fb65d87d7e873cc642afaca12118a43a8c405286

  • SHA256

    d72b5215a1ffc411bda8cd6b48168f62a13751d9e9a74493d7598d7973f7c82b

  • SHA512

    5b183731bdfe8bae29c2d24b5049ee525142194c57ddc3beb17db9a0cc905ba1fea336ab32ef07a36a9ba585c0fcc9428d703145cfa14b626d8a77730cc066c6

  • SSDEEP

    3072:jzyDoUefdkPI0iGEndlOzQnvqmqtlMyNhE04ys4x7sJo8e8hy:fHUjPI0iGEnd2msDNhE09x7su

Score
10/10
jonkaredline

Malware Config

Extracted

Family

redline

Botnet

jonka

C2

77.91.124.73:19071

Attributes
  • auth_value

    c95bc30cd252fa6dff2a19fd78bfab4e

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • o0978522.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections