Overview

overview

10

Static

static

10

0x000b0000...60.exe

windows7-x64

10

0x000b0000...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0x000b0000000122ec-60.dat

  • Size

    95KB

  • MD5

    f3cff86f5d168cfc47a3175c3a27ee82

  • SHA1

    13c8094e32ef1fb33f2a18dd63d3d573751ca844

  • SHA256

    971bca41ffbd45635e74f539ded282fe9bc0abcdecff3f5c5e00533ddb29e59a

  • SHA512

    fa84de197ddfb4dd9db5c076f2eb072c4b1d22b6c117b479f655230667a0a40fe72bb4e9c3ebde6c537871295f56a4fd085defe26d6a4e708736d062c0167600

  • SSDEEP

    1536:Fqsgaq+A/lbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed2+3teulgS6pQl:DfZeYP+zi0ZbYe1g0ujyzdoQ

Score
10/10
cheatredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

5.tcp.eu.ngrok.io:13065

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000b0000000122ec-60.dat
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections