General

  • Target

    NEAS.5e25cc31cf119626906765df13fe2f50.exe

  • Size

    221KB

  • MD5

    5e25cc31cf119626906765df13fe2f50

  • SHA1

    a089cb9a55d75c03d475b194273e0b4fc8c9b38f

  • SHA256

    e276f1d94b594fc396ae1d333579da02e238603428d143fbc09519172efad710

  • SHA512

    606d0d09bae37d13165119bea9c25e583dfa4063dcf9a3a10eb404351646baeb82f15dce7eef8f299d439967bdd152b70cfb5efe8d277d7ddbf3515fbfd334ed

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.5e25cc31cf119626906765df13fe2f50.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections