Overview

overview

10

Static

static

10

NEAS.0d403...f0.exe

windows7-x64

10

NEAS.0d403...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0d40368c9b2041a790235de4ccf6c5f0.exe

  • Size

    219KB

  • MD5

    0d40368c9b2041a790235de4ccf6c5f0

  • SHA1

    bd45cdfcb346b2c4a11f8f39c9db1a9ce579d1c4

  • SHA256

    3fe243c8484762a5f36c5c9cd759386317fff63d45848212b5fc8635e60f85aa

  • SHA512

    04d764d0c7d17a9c64eb18eaa33bcc805ee2dac0ccab915503fc4f54a253ef379f3ace08794327585d1b25dbab971fecf5cd4c86abccfb625ae0c995da53e07d

  • SSDEEP

    3072:LPzDc7DNgcddS9WrIjpuYZv3VzRdRB4cRSdX21ShieocaKSg:LPHc7DNgcdZrIjp3X9dT4c0Z21SQ7cF

Score
10/10
@shoegazzeredline

Malware Config

Extracted

Family

redline

Botnet

@shoegazze

C2

45.15.156.142:33597

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.0d40368c9b2041a790235de4ccf6c5f0.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections