Overview

overview

10

Static

static

10

912ab8dd67...02.exe

windows7-x64

10

912ab8dd67...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02

  • Size

    240KB

  • MD5

    1dbec8858158a7b4ccfc3c3779b9c2f9

  • SHA1

    7292efa7a0bf6cc3e0dea6b26ac054ae8b7b1b1c

  • SHA256

    912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02

  • SHA512

    4dcebecd0317a9549ee9493c8a9338a70844c4d8575575806534a6487aa2e3f1f370c83608d059fc263db0ad1c7ce1836f25fdb47d16c0bf5fc9b06887ad0154

  • SSDEEP

    3072:WBjqhLteCXuiRYInt782Hp8tTH7Cbub/kQ4aFidLqboe/nHP9pChAAOr/M0RNTem:ijq1XuYnvubGXQDdjP/Chs/M/

Score
10/10
ghostredline

Malware Config

Extracted

Family

redline

Botnet

ghost

C2

104.37.174.31:27620

Attributes
  • auth_value

    1d44e9a3b9adc75d1064fce70c099dc7

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 912ab8dd67dd5d89b9367e96fac8352369084a1119ba4ebef5219e37ac65cf02
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections