General

  • Target

    t6404139.exe

  • Size

    174KB

  • MD5

    f31fea4b9ada696af603403adcb1f115

  • SHA1

    b1a6ca5c353ac6b363cdf8f48a32d555c0745ba3

  • SHA256

    98c96c4000c6c78c841e5897114610d9c723ce7168f7525803c9d7b2251220be

  • SHA512

    5ee2a79856828f6b3618bbb4a30313c7cf64b66d9626ab4c761dc9568d7ba2628b88eef58b3e46bce8599429b636664e08968f30832abbaf569ce0b5e59fdc37

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • t6404139.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections