General

  • Target

    NEAS.ba5462678006d73a4c87de5c1e469b60.exe

  • Size

    222KB

  • MD5

    ba5462678006d73a4c87de5c1e469b60

  • SHA1

    00aa6a1592a3d1af2a68d78a25e37bde02928aae

  • SHA256

    a8b190f09ea68264af4f5ca29e9bf18899cd72bf04b144fae26144bc6374942e

  • SHA512

    8f5122f04f73d051330e2554d9174d301fd3ddff78a6e86f91c4aeddc82704e421a5abc57ebfed9f47bc29081d29f89976c09a08feb9966db82cdeae3022cb6b

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.ba5462678006d73a4c87de5c1e469b60.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections