General

  • Target

    c0e2a4709603f7bb780af414ac1231c0_NeikiAnalytics

  • Size

    296KB

  • MD5

    c0e2a4709603f7bb780af414ac1231c0

  • SHA1

    5acc07ed4fc292eafe5cb3bce05ec364839d423d

  • SHA256

    d366c6dde84a6b986ec72aada2b2f11db8bd81821e7769e12f9ff864fcbfc13f

  • SHA512

    4cd2aa51a76298f4ac0f22fa13c76d0e8340205473938728f6974039dce4f6ef4aa00c946e0d97dcb49cf156d8a000c5e75e31eab26df58e0ed17a3b8a6e58b2

  • SSDEEP

    3072:Mq6EgY6imrUjdI1bwPTXpcQ4cOpRCT3bTAztASiO8cZqf7D34fpRbBOu:HqY6iOwP1c5ciCTrTAZAg8cZqf7DIfp

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

rModel

C2

135.181.135.160:42715

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0e2a4709603f7bb780af414ac1231c0_NeikiAnalytics
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections