Overview

overview

10

Static

static

10

0x000c0000...05.exe

windows7-x64

10

0x000c0000...05.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x000c000000023117-105.dat

  • Size

    95KB

  • MD5

    854ff294f0a8549ed61ca06e100e55a7

  • SHA1

    db0c534319c079e7c9f3c2b9a9fdeb7dfe61e6e7

  • SHA256

    b6f0c3d53b93d35eff69c3ab8433189f87d2fc7bd94a09d8b0b69abee94cb301

  • SHA512

    d81f614ecf98115b8646cc87c1f67738db836b0b5eeffdf789dca93057dc78a6803e3114217fb863773e914f734379acd3dc6c76541bba0b11f10cbe25a79420

  • SSDEEP

    1536:Bqs+FRcqWClbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed28tmulgS6pUl:veRclyY7+zi0ZbYe1g0ujyzdoU

Score
10/10
cashoutgangredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cashoutgang

C2

4.229.227.81:33222

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x000c000000023117-105.dat
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections