Overview

overview

10

Static

static

10

999ffdaa47...cs.exe

windows7-x64

10

999ffdaa47...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    999ffdaa479051d98f18d9fb1e96fd80_NeikiAnalytics.exe

  • Size

    172KB

  • MD5

    999ffdaa479051d98f18d9fb1e96fd80

  • SHA1

    56202fbaaa30640cf7f232acf28c5e1a7710392e

  • SHA256

    7d97ba41c582aab5f5e7953b6cd5f36ad27e81f0880da51fbaea655a2202bfef

  • SHA512

    9678c4a7996f329332235057cd65726575e6552801111035b1e39a2831e66beb8cad68f46c174a06246c0f7c6f2ffc2a1674a4408b3d4ad5d5423a63e2dcfd61

  • SSDEEP

    1536:gDrRuq1Ps36sv0W7TRVOQM6fwrHwhn/rQbg5fb25LxNcqYQHnbuxaNLQmpTu0Gkk:Q8sO/O2DnEba0LxNEyPNcmpTui8e8hT

Score
10/10
kiraredline

Malware Config

Extracted

Family

redline

Botnet

kira

C2

77.91.68.48:19071

Attributes
  • auth_value

    1677a40fd8997eb89377e1681911e9c6

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 999ffdaa479051d98f18d9fb1e96fd80_NeikiAnalytics.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections