Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    h7813781.exe

  • Size

    174KB

  • MD5

    b623cf877c3e55e3afc976941e116302

  • SHA1

    c0e0d846dd1756810d9822d6ce7e961832a5b8c7

  • SHA256

    c9be26713066845f8d0d35b4b6a74cced7aaa641d8e4aa82d96e90c688f7b322

  • SHA512

    eb0031652b7d90aae7b7520e565b273b38f57f9236848ab89d8ad7d14a38fb6a29637736b0b27a735709741c569df298c4f2e5e7ceb0851d92f0a26ebf5c5b9c

  • SSDEEP

    3072:YQx3u/I3uI0qRjH/AUOzblVuQmHMOKE0s3CqFJU4JQ8e8hD:Y035uI0qRjH6mLKE0ZAJU42

Score
10/10
luskaredline

Malware Config

Extracted

Family

redline

Botnet

luska

C2

77.91.124.55:19071

Attributes
  • auth_value

    a6797888f51a88afbfd8854a79ac9357

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h7813781.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections