Extracted

• • Target

    Redgine craked by jotaah.exe

  • Size

    6.8MB

  • MD5

    481fedb42c5457a4cc3df8102cbc7a57

  • SHA1

    68343f8d4d7d9ad7209aabb7be8736a9db6a1e2c

  • SHA256

    57a08fe1da100ef18cad24b570afec67935e55c5ece1971439234b81132e3673

  • SHA512

    3c9166cc9de8b82c509d577b3a7c6cf755548e3a73c7f161f7e8ae5bf9016484ea8197bbca39acaf155711a7cd6a33ffbf973e8d0c85545c28c8517a3a59382e

  • SSDEEP

    98304:R6kwN+MdA5wqMI8MMhJMjarJaon7JPzf+JiUCS3swhzqgez7DoaZDJ1n6hBnLnza:R6V1/B6ylnlPzf+JiJCsmFMvNn6hVva

  Score

  10^/10

  upxdiscoveryexecution

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Loads dropped DLL

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Enumerates processes with tasklist

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2