Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    eb577fc9acfeb92b8cd42087afc0c625b3c539038cdeb57a6fc3013546939f5f

  • Size

    300KB

  • MD5

    9262050d8dc87c290ef37f993b54ceaa

  • SHA1

    6a59b1cbef34dd04abdcd0a7766b995d291c69e0

  • SHA256

    eb577fc9acfeb92b8cd42087afc0c625b3c539038cdeb57a6fc3013546939f5f

  • SHA512

    e0e342551f9201e178da1e68aad9a910095ffab1b3ad858afda3b2458ff1f5c801680837c864235c78ef0e8c7d1eb03f99560ffc635f361844550e61311f1dfb

  • SSDEEP

    3072:528LdrYeQ6sXhLEbSRNIRQogXIdilXIn+HwU5xCdRnAgkVMRqT6Dv/YCeqiOL2bb:QAbSteil1T5xiVAXVMRqT6D4QL

Score
10/10
leg1ryredline

Malware Config

Extracted

Family

redline

Botnet

Leg1ry

C2

195.20.16.190:38173

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb577fc9acfeb92b8cd42087afc0c625b3c539038cdeb57a6fc3013546939f5f
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections