General

  • Target

    NEAS.97d31f87fdbcefaedb0148343d990930_JC.exe

  • Size

    222KB

  • MD5

    97d31f87fdbcefaedb0148343d990930

  • SHA1

    b987e19ae6b8de50559eb3d3dbe8107295669001

  • SHA256

    3bc34a1c88e014fbdd582cf9b5feb2ae3557262390d849e52b52b1342586d2eb

  • SHA512

    20540fd92043afd83baf69528fe532449e84fd7224e065f4c86a14b8df43cb78b762577c609d0292bd72e3e6091eec202f4c64c9d59b6a81f29abd4db099f54e

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.97d31f87fdbcefaedb0148343d990930_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections