General

  • Target

    NEAS.b4251acab6134dfba79cf091f6080470.exe

  • Size

    223KB

  • MD5

    b4251acab6134dfba79cf091f6080470

  • SHA1

    cf95694d440c1b54b990629ef21332eeee27ca0c

  • SHA256

    1a99ec232a21fba6ae17669fcbe3a026764ca98b39ea929ed8bb822031833119

  • SHA512

    b84d7713021c8c817b589f258f9f0b5089ee55c921a4316f43f8b0127a098869addf1b56400a07c351233d4ab380e6d240871cce50a88155bd5c80081f7328b2

  • SSDEEP

    3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kukish

C2

77.91.124.55:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.b4251acab6134dfba79cf091f6080470.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections