General

  • Target

    t2978361_JC.exe

  • Size

    175KB

  • MD5

    7b7c5af0b8abd9d86992e0eb52fc0422

  • SHA1

    366fd11059b4b56ccd40574690990005aeaec4fa

  • SHA256

    f79ae4bad0585178911ff9b281b1908a201d05f90ee3ed4771a1af33230d02c2

  • SHA512

    843edca7bf1d313f734e5e29e22b5f24d3ea18d99c4758f8333e1ddbce280367f8159ff71573f2bc102566544f3315d4a61f94e728104e796074183ff0464b96

  • SSDEEP

    3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gena

C2

77.91.124.82:19071

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • t2978361_JC.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections