General

  • Target

    NEAS.e4c242d3b6155ae9c3d45bfa8b4b0220_JC.exe

  • Size

    222KB

  • MD5

    e4c242d3b6155ae9c3d45bfa8b4b0220

  • SHA1

    9937d024710d27c0839d2ebdcaef0027eb85b18b

  • SHA256

    7a2c147346013cf9cabb11c1e123f6e3f717b76a2c5d29b2c809be98bfaf3958

  • SHA512

    d740874b01b66fea3a6022992cbb928820aa920d91670176a3cc15d5411186aa2b48cb2f234ee8c80f4a73ae58c4aba24ec022ca5ee2b1247b01efb782bb68c8

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.e4c242d3b6155ae9c3d45bfa8b4b0220_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections