Overview

overview

10

Static

static

10

5035b94bbd...b7.exe

windows7-x64

10

5035b94bbd...b7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5035b94bbdb1d966107b9e61a1d03db7

  • Size

    100KB

  • MD5

    5035b94bbdb1d966107b9e61a1d03db7

  • SHA1

    ac64c2334ba1087e55a3299633c7eacd60b248f6

  • SHA256

    a85f60e1629b921d993e257bc4ad2b693acb78ad8d7f854676e788b6eec23e76

  • SHA512

    d85658bf486363ad941a9522277a59d96231261be8cc380f880c176679ebf24516ee41ac1ff19efc511b10dd2e0a3937803e4ffcbdf990c01ae833d811c5d65e

  • SSDEEP

    1536:bm386AEAeBxdBBMW3Xc7bg7sWqGHHQz37Egbue7vAuvNyAsdMBi1xQeTEmG6WAaM:bi86AdGz47bkQz313AulyddLsvkj

Score
10/10
@rabota_mo9redlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@Rabota_Mo9

C2

88.198.119.112:14961

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5035b94bbdb1d966107b9e61a1d03db7
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections