Overview

overview

10

Static

static

10

h8063312.exe

windows7-x64

10

h8063312.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    h8063312.exe

  • Size

    174KB

  • MD5

    5f140363920a2df359cc47e6a7611f86

  • SHA1

    45a9ad48c2158d7980e170228bf06a48371e5761

  • SHA256

    5a3bcf8163d7db34f85a7bb0c4510fdcc9b10e5908ec8e1aebd314c78caf1b28

  • SHA512

    b2f37de1482ab17f85d389067052f33ce94ca177aca8d7309f9a6fa1bff4280b1053e609368bec1ffbc4bed9f3e0d40e5dee56f6fc3a2f37120d7c87eb470a91

  • SSDEEP

    3072:AmJOPRIaXI0TIakh+OQhqV+wp5/aif4E0+6OKj0ap0HijJL8e8hh:dJObXI0TIakh4pE4E0/Odap0Hijd

Score
10/10
kendoredline

Malware Config

Extracted

Family

redline

Botnet

kendo

C2

77.91.124.82:19071

Attributes
  • auth_value

    5a22a881561d49941415902859b51f14

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h8063312.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections