Overview

overview

10

Static

static

10

3706118882...a7.exe

windows7-x64

10

3706118882...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3706118882e7356babb5e8d6fb1a44a7

  • Size

    100KB

  • MD5

    3706118882e7356babb5e8d6fb1a44a7

  • SHA1

    6455af92c334cf6dbfef8e069d181c49f9c8c14b

  • SHA256

    cb12b41cc42df4957915fba6c2ced20551e4ce3e2a5caf78c4ef45387460039a

  • SHA512

    591c87b7d2afb3789374e9dc86ef35fffeafb9153d08f6f6bf085ed3928450d4f075958485f81c81943776a1e70eab42516add73b9078938f518533ad901425a

  • SSDEEP

    1536:Wm386AEAunSB7s2jOsZlpPMyctaQzGLu73gbue7vhuvZyAsdPL7i1xQeTEKG6WAy:Wi86Ad8mXZZlRQzlE3huByddPqsv4y

Score
10/10
maserattiredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

Maseratti

C2

45.88.3.176:17033

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3706118882e7356babb5e8d6fb1a44a7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections