General

  • Target

    NEAS.573e7230dee89693c6f14637a95ab4b0.exe

  • Size

    222KB

  • MD5

    573e7230dee89693c6f14637a95ab4b0

  • SHA1

    fc19b91048dd81591408d338a7b0ad00350df2c2

  • SHA256

    fcf411750f31cf1a056f0ccb1c41e946b7cb1affcbd5e029c5a04496fdcbc034

  • SHA512

    5475893387c6a5225ed79c2446fa3bb2cd7b802abfdb3d94b9387d6f39693051deee8fb08d843f3e8193589d957cfaf9decf8ddce8e9a203fbab534a3f4dd56f

  • SSDEEP

    6144:EmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:DHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.573e7230dee89693c6f14637a95ab4b0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections