General

  • Target

    NEAS.ce28d2c3901520f0fa6dc558a8424e20.exe

  • Size

    221KB

  • MD5

    ce28d2c3901520f0fa6dc558a8424e20

  • SHA1

    d7101d04057ae27bae5fd23afeda9e54378b3518

  • SHA256

    8a875990b330944996953294f7081e9879b3b86a4041097c982313a306f4316a

  • SHA512

    2f03728de88a978300a9131de9687bd7acd7e1cff010edd53562ed699156738b1598bd92c26ed3e13b766e387098ab07f8c80dd04ae8e8bcc893ecff845dc4eb

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.ce28d2c3901520f0fa6dc558a8424e20.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections