Overview

overview

10

Static

static

10

0350a4db0e...6b.exe

windows7-x64

10

0350a4db0e...6b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0350a4db0eba4dd22680da8ff5201a6b.exe

  • Size

    98KB

  • MD5

    0350a4db0eba4dd22680da8ff5201a6b

  • SHA1

    a377511cfdbd46b21e802c82b5a5e7f45073be21

  • SHA256

    a6e6bf0a192f9e1197c488b1a88ab2841d201c2710fa2ed5340461f6e36e78f9

  • SHA512

    7c1f1d223d269daf41c207c4cfe9aaa32342e0ac5bc1cd9298cf7a1d2b84896e72605c0ac97ad7dc4bc4f68e5d54ceb8618b5c48f37b426855a39c4a31ae6358

  • SSDEEP

    1536:s3LNmocey7h/jFHgxQFnJM2CJFlJsmbfexvTuvEyyedge3nqCxXsEOG6ijoigX:sxmocXQQxJMZJxhgTusyzdySnU

Score
10/10
@cvvfxredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@cvvfx

C2

xetadycami.xyz:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0350a4db0eba4dd22680da8ff5201a6b.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections