General

  • Target

    NEAS.91eac06cba6bbc2439d11586305e7370_JC.exe

  • Size

    222KB

  • MD5

    91eac06cba6bbc2439d11586305e7370

  • SHA1

    abaa17ba92b8fc24962ac04bbeaedf8b72627da3

  • SHA256

    e1af80b4441920253993de91dd0d16c8c2b1c041dac6cefe47107af2405a3067

  • SHA512

    832b9ad44757cdd1ba19f7efef3a4f9400af453fd6ae5107cf42bfd4573743ff715684b23725c727cbd7886b3aab308f791ba713cae0ba617974bac27f028538

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.91eac06cba6bbc2439d11586305e7370_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections