Overview

overview

10

Static

static

10

478007dac1...18.exe

windows7-x64

10

478007dac1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    478007dac16e25a5b53e663f1e29d4bf_JaffaCakes118

  • Size

    150KB

  • MD5

    478007dac16e25a5b53e663f1e29d4bf

  • SHA1

    62fb9a4c481f8e73d622404cf7117745010ff38e

  • SHA256

    9df8e7102db5394f359135590da378697da6c66faffc88c98f54144aacddf4fe

  • SHA512

    c850d0726467a8830ebf12502d98fb53eefe54537eafd4ba02fc3db1ceebbc3f8fb2c6d5831f5cb105200035bbe6932373d82d6bc1b2e627d72a86acef2251d3

  • SSDEEP

    3072:dLCD8t7We/RNJqoD2F13vH8OWHlnobRcu5Az57EOPtp:co/7JqoDk1klnobRcPz5Q

Score
10/10
darkredline

Malware Config

Extracted

Family

redline

Botnet

dark

C2

195.161.114.90:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 478007dac16e25a5b53e663f1e29d4bf_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections