General

  • Target

    NEAS.3a036c0c4e3b4bed1f105dfdc09e16f0.exe

  • Size

    219KB

  • MD5

    3a036c0c4e3b4bed1f105dfdc09e16f0

  • SHA1

    6cdb47b2a5f7f7795a8401345a8cb135a327387f

  • SHA256

    511d8f854547e40fedf2c964f07a66c52dec57abe9fb5d5a263ef2133f27824d

  • SHA512

    1074dec7eb3859d475d8100212618ac992a597a5cb935d5e6165b7d5d3321b88d0302347b87049e7c0756097966ad62c0ae41de7ef82a424f9fd1992ec518953

  • SSDEEP

    6144:neT7M7zNgcEgkrbVNurQ+9/Ac0NV1SE561FJ:QCNgcEjryV4cA561FJ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kedru

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.3a036c0c4e3b4bed1f105dfdc09e16f0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections