Overview

overview

10

Static

static

10

1cdee35384...43.exe

windows7-x64

10

1cdee35384...43.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1cdee3538446b9f49c4a5b7a3a80cd43

  • Size

    113KB

  • MD5

    1cdee3538446b9f49c4a5b7a3a80cd43

  • SHA1

    1c8615dab9a84ab9affe80e02cda4a78792ab5ef

  • SHA256

    1bce53af1b1f7188871d28f3999f8df99346ab55f493ba3580ef9bb09629b683

  • SHA512

    5bb7990abbfcd4f54daaf870e95b74869b5d771a3226a6c963bc63f97ad929e290a2408fef94ddf7ac9172c1ff270e4b97a20a4cc85d67f7431e7d571a16fee8

  • SSDEEP

    1536:NqS0sz0w2wvcFQ2P2/xVj7D+D2HZB3PXi8dRlPyUEdEOl/4paEJG6u2oigA:N9nk6bjPW25B3XR1y3dEu/OMk

Score
10/10
@topmanager2redlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@topmanager2

C2

135.181.171.9:45918

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cdee3538446b9f49c4a5b7a3a80cd43
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections