General

  • Target

    NEAS.49310c952bdfefe6db8c45e092852cf0.exe

  • Size

    221KB

  • MD5

    49310c952bdfefe6db8c45e092852cf0

  • SHA1

    6ef1ded2aec253d3451a42f233373b72e2380768

  • SHA256

    ee384947112b86d7139f690de333e4d90c0dde86dae7ed0e6ead1b550684d1cf

  • SHA512

    4aec92fb7d8bbad60c160b70a3497c5683f7400530020c75ab04986db64057fe54bf9cf6a0e11f639d26c2411af93c7c373a1f96ed7147327d0402a597768eca

  • SSDEEP

    3072:t3zxq4nKNgcb03jq+PEQDt/q6VOu3HeBM8dtucsh:t3zxVKNgcbsjOQB/nOu3HeWetuc

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

rapta

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.49310c952bdfefe6db8c45e092852cf0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections