General

  • Target

    a09f94ee1c93fde1f4f168142efdfff0_NeikiAnalytics

  • Size

    293KB

  • MD5

    a09f94ee1c93fde1f4f168142efdfff0

  • SHA1

    b484ce06fadf6fabd450b2594c741c70fbefdd52

  • SHA256

    ac02589a81d4073a3b16aac34f8a508f017a32cc00933836daffe5649e606292

  • SHA512

    0765f34da9ba149c256a61a435ab0e87798b32d562d484fe9395d872c73d244fa505fd7ce9adde7e89f7dc8f1578563b781c8403965217a09c937db9d7d672db

  • SSDEEP

    3072:dq6EgY6iurUjdOKtwPyltTa88ETAjtYSKZIcZqf7D34tBbBO5:0qY6ijwPQf8ETAJYDIcZqf7DI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

TON_Live

C2

23.227.196.15:23461

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a09f94ee1c93fde1f4f168142efdfff0_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections