Overview

overview

10

Static

static

10

Kurome.Bui...er.exe

windows10-2004-x64

1

Kurome.Bui...db.dll

windows10-2004-x64

1

Kurome.Bui...db.dll

windows10-2004-x64

1

Kurome.Bui...ks.dll

windows10-2004-x64

1

Kurome.Bui...il.dll

windows10-2004-x64

1

Kurome.Bui...ld.exe

windows10-2004-x64

10

Kurome.Bui...ub.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Kurome.Builder.zip

  • Size

    492KB

  • MD5

    5a177de4f90e834b20ed4d0df91ef784

  • SHA1

    ca63b1477b07f02d679cd2386586de9f4563eaa2

  • SHA256

    8c01c6d9cdc82805e9bc47f71404615498d3623c078657c4cf494500a20db845

  • SHA512

    04004e35afcdd3b69ff006cd576a75a02a71d8fc0a8b0a68b4ef1738c8400e494c73be59113719424e7e075ba76fc055dba2c1da856a4b8a00e5db1ee7841508

  • SSDEEP

    12288:J0n9KUxmWWGlVF8ELMlRgytbBQaUM7Z50F3fhsvUb14Kc2IaJqYVBgpmg6h:+cUcDY2wMHgytFDYdhsvUWvU9VO6h

Score
10/10
cheatredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

194.145.138.85:28105

Signatures

  • RedLine payload 2 IoCs
  • Redline family
    redline
  • SectopRAT payload 2 IoCs
  • Sectoprat family
    sectoprat

Files

  • Kurome.Builder.zip
    .zip
  • Kurome.Builder/Kurome.Builder.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Kurome.Builder/Kurome.Builder.exe.config
  • Kurome.Builder/Kurome.Builder.pdb
  • Kurome.Builder/Mono.Cecil.Mdb.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Kurome.Builder/Mono.Cecil.Mdb.pdb
  • Kurome.Builder/Mono.Cecil.Pdb.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Kurome.Builder/Mono.Cecil.Pdb.pdb
  • Kurome.Builder/Mono.Cecil.Rocks.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Kurome.Builder/Mono.Cecil.Rocks.pdb
  • Kurome.Builder/Mono.Cecil.dll
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Kurome.Builder/Mono.Cecil.pdb
  • Kurome.Builder/build.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Kurome.Builder/stub.dll
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections