Overview

overview

10

Static

static

10

45c832a191...f1.exe

windows7-x64

10

45c832a191...f1.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    45c832a1913989090279b3537022cff1

  • Size

    440KB

  • MD5

    45c832a1913989090279b3537022cff1

  • SHA1

    1373437acd5c7029e955eee81a15cebef21728bb

  • SHA256

    a70832d81b9cc068f6a2ad5bab3b004bbe6a1aeb62b7f68ddae53bc7f36a463b

  • SHA512

    7e170981849d9f6c20950fb63e12642325f1e6aef6a30cab16d817fd3b9d81c9f39bb36c06f6e7d8da76f0037e43507df4c45784321835a649b65054bd2bebb9

  • SSDEEP

    12288:S1qLAG+4bpIw6jXDnY5pELXA95UyvXUGHe7/jFznK/:S1wA4psMpFzQ7jFW/

Score
10/10
@toxictyleredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@toxictyle

C2

92.119.113.189:21746

Attributes
  • auth_value

    de713911efa818890ac36085c9a0fc58

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 45c832a1913989090279b3537022cff1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections