General

  • Target

    NEAS.55901304816852742b9f3921b33b7c6259dcaf34004d644e3784994af0632741.exe

  • Size

    221KB

  • MD5

    342218506f363e6b8d353aa201b42a98

  • SHA1

    372da60c9e0ae5c43084ca8d7169f2083cacb81a

  • SHA256

    55901304816852742b9f3921b33b7c6259dcaf34004d644e3784994af0632741

  • SHA512

    1b3e06a722ec014de7aadb91612631648dba7e6c0f3abb080a2edb9287d9228654ae332ea8cd874f76fef9a67903b7a0a91f9bc8de2d4486bee7abb37adb55f5

  • SSDEEP

    3072:QMP+jpKK5lVincNgcw2z5uCg8ETRL+VX1t/qE4ODjRLarLmCsh:HP+9acNgc3zYCgXl+V//0ODjRLwKC

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

crypt2

C2

45.15.156.251:26971

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.55901304816852742b9f3921b33b7c6259dcaf34004d644e3784994af0632741.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections