General

  • Target

    1cd5ca2baa03c368c8cbf2dfbd8bf050_NeikiAnalytics.exe

  • Size

    172KB

  • MD5

    1cd5ca2baa03c368c8cbf2dfbd8bf050

  • SHA1

    b083963c14d088019192e6297e8f2238b785bf1d

  • SHA256

    d1d494271df55178a3031dd0045d486332f7702d49373f324de51e08be4108a9

  • SHA512

    c34356e0890a287cb87cf9539fb7454d635f6b3955e266197f5891de98e2d77f6fdbd69b16d25bdc2477b87e34498420e2108d8672f893dda371ffd43d278971

  • SSDEEP

    3072:HUUEa9Te3JQBf8td3/oxN1ULH0tyr8e8h4:07QRyi1tyr

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mucha

C2

83.97.73.131:19071

Attributes
  • auth_value

    5d76e123341992ecf110010eb89456f0

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cd5ca2baa03c368c8cbf2dfbd8bf050_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections