Overview

overview

10

Static

static

10

19c8d38b83...68.exe

windows7-x64

10

19c8d38b83...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19c8d38b83b1a2a1aa447e079cf1a568

  • Size

    107KB

  • MD5

    19c8d38b83b1a2a1aa447e079cf1a568

  • SHA1

    92ab8858c24eaad97854ab8df53d3d4421534e5a

  • SHA256

    7a91968a19e7bb95904ce1927e31bc657f2ea6188f234ea18f510150b401baed

  • SHA512

    01e9b98fe4bd1b9e44e4f7e51a7005ba6f05693e019eeddf987d15a5fab827c730397f8d584ab6f3b048b7113c7bcc0de75aeda010d31d19a8eaf17fbdbdd535

  • SSDEEP

    1536:4t9pmqqxi+O2jbdOJ36RXMonN7HjbuqGdSnMTyq+dF+LdDjEaG6qTaoigR:uSxi+DjZy36RXVVGSnqyjdFwYXB

Score
10/10
@wulsomredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@wulsom

C2

45.132.104.217:12780

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 19c8d38b83b1a2a1aa447e079cf1a568
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections