Overview

overview

10

Static

static

10

n6682541.exe

windows7-x64

10

n6682541.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    n6682541.exe

  • Size

    174KB

  • MD5

    01d20f0c0e6033906659cc53e4641cf1

  • SHA1

    0f4b931bbaf2839f9a4ffe8e2e4d72d1833a02d4

  • SHA256

    71a1c45af9c427ee3b0dd110810ce2932509df4329f9c4de69b45dd10a496524

  • SHA512

    8c2468462afffcf88e4050e9e8a6de293025aefe21a2aaf836d1f169fd32ed1f35f31cd6a65c19b6ad73c3b87b4ad08ce20f8409f7659b1cc3e1a91fc2107fb0

  • SSDEEP

    3072:OXfiOpLvUI0pl0KtOlZ9LRQl/2E0+lccMveJ18e8hq:0iIUI0pl0Ky42E0SMveT

Score
10/10
ramonredline

Malware Config

Extracted

Family

redline

Botnet

ramon

C2

77.91.124.82:19071

Attributes
  • auth_value

    3197576965d9513f115338c233015b40

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • n6682541.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections