General

  • Target

    n4109700.exe

  • Size

    174KB

  • MD5

    6d17b9e234193cf1d3adbc03fc5d08c2

  • SHA1

    56c4bbbc4d25fd46029ac2d6cf9fa8da7aeabc8f

  • SHA256

    e23dcd9fb56c0f9c5b2a7de72b7f37a1da185d543041df69778552fca1476488

  • SHA512

    3c20e1c87d92812c11d46e993690fac6afad0a2b36632072ff38525e9744c620efad65391a92473d2b0e7e2b7f26fe6508cbe3189e5174938c3f63f77e8187b7

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • n4109700.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections