General

  • Target

    NEAS.32324d08d037d1fe280f7aab066a7800_JC.exe

  • Size

    222KB

  • MD5

    32324d08d037d1fe280f7aab066a7800

  • SHA1

    7d2f09b5ecdb6d12ea384d4a1bc50c1241a9d0b9

  • SHA256

    b8e08824a5277586c5d150cb0ef2b381fadb7e37365e5b687880e75749b5526e

  • SHA512

    89744d3fb5acbed50a8fabbd85b61b9eeb3d9f98331d36cf8db2ae2b5208313efc583475200d874489c10e5f1973ee114cac73139a6bd6d8003ec38fa30e3ce7

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.32324d08d037d1fe280f7aab066a7800_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections