Overview

overview

10

Static

static

10

250a5f8df1...08.exe

windows7-x64

10

250a5f8df1...08.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    250a5f8df1e6ede5f3853add72080308

  • Size

    100KB

  • MD5

    250a5f8df1e6ede5f3853add72080308

  • SHA1

    5e16c6021a1f92bbe47240e2b3e1822b02acb87c

  • SHA256

    1d928c0f640e731208adc0736aca791af0ba7e7dfdad0800d9de2fc968ef0010

  • SHA512

    ee5a2ead1f008c77711f7cc6c7300b05144b756915180a4ca6b09fcc3f02428f4a474642128601acdb901a2bacaa60e2d383255a55acb757eb51562b356d3f9d

  • SSDEEP

    1536:Om386AEAV9cBdsTnbmQzE7FQgbueqvauvNyAsduTi1xQeTEGG6WAaoigj:Oi86AdXSaiQzEhdYaulyddbsvEz

Score
10/10
@steworredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@Stewor

C2

95.217.159.87:4348

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 250a5f8df1e6ede5f3853add72080308
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections