Overview

overview

10

Static

static

10

9f29232fde...b6.exe

windows7-x64

10

9f29232fde...b6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6.exe

  • Size

    169KB

  • MD5

    52f4f6fc1dc38ba19e32f9c41e87ed06

  • SHA1

    d87b31a7d6e2c817fd0e38a71ca348264c4a9a7f

  • SHA256

    9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6

  • SHA512

    147ccabcf032d1295c852af1116e079193370cf5396598af1745c0470a2815002e2fe9aff377c9c751aa870d6a453208deb98117b5de45343fe1cd08be2e0648

  • SSDEEP

    1536:19FKuQhqlVZRGWWwZrC3T3AHHnpX9rQTGqVIbumugSeIsfcNm83wYk08e8hkD:1jPQN93rUpXbqV4MoIsfcNmC8e8hkD

Score
10/10
danteredline

Malware Config

Extracted

Family

redline

Botnet

dante

C2

185.161.248.73:4164

Attributes
  • auth_value

    f4066af6b8a6f23125c8ee48288a3f90

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f29232fde14f712a2b5198ab06e0323fccf520a3a89436a4b1d8cbfe2c0cab6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections