General

  • Target

    0135b16bf460afca41848cff18050f90_NeikiAnalytics.exe

  • Size

    172KB

  • MD5

    0135b16bf460afca41848cff18050f90

  • SHA1

    0c042cb2f387f622e45971a74d872a5792549943

  • SHA256

    46f1d7f36eca0ff91a9b5c8a403161a7fe1b307fa7df6facb8594306363f48d7

  • SHA512

    883bf855bbf5616d059ef11346c85d6d30388db8912e7e83ed10190e8d92b0c1d9c7ff9f05fecc60a0f33609db357bb3710be1ccc7e694fe7df68b03cc2ae48e

  • SSDEEP

    3072:b47FCYO0NJQ5S0xNcIA7qVJeNGT8e8hy:bvd0AEnCVJeNGT

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

drake

C2

83.97.73.131:19071

Attributes
  • auth_value

    74ce6ffe4025a2e4027fb727915e7d7c

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0135b16bf460afca41848cff18050f90_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections