General

  • Target

    9ba7b0bcc2c50d90691604605c997050_exe32.exe

  • Size

    221KB

  • MD5

    9ba7b0bcc2c50d90691604605c997050

  • SHA1

    61970bc72559f37c99346f76989c552281bfa21b

  • SHA256

    ed407f57655bc99c43cecdeff1921c4a294a17c4fbfc4a6d91181da8e5267f7b

  • SHA512

    55a59e59e81ff928692a61fa9d57e032ec8ccbb90a4bb9275972b1831b7cee4cffbd6d421adc743fcfa041a5fcdfad0fd617ed44515236985268d9812a8cb7bb

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ba7b0bcc2c50d90691604605c997050_exe32.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections