General

  • Target

    Cracker Smtp Master V6 by aron-tn.exe

  • Size

    95KB

  • MD5

    ad60e52eaf62591bd71bb3bbe419ca3b

  • SHA1

    974bc6c10a10d172a950eaf9bba06a94d4fbfca8

  • SHA256

    877ced13ebaf2b0fbe6b9ec4e332251d6e9d65d7ace653da77003ef4ef0003fe

  • SHA512

    77e9d6328268c472b96ffcb20fbb7f23b0c71b30d1b05d4f2dc8ad508f13fd8f6374f589bf305187cc965c7beb3a4e463425aeaa778567bac151c00bc57549bb

  • SSDEEP

    1536:qqs8cqSvlbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed2ZteulgS6pA:YFJNY7+zi0ZbYe1g0ujyzdtA

Malware Config

Extracted

Family

redline

Botnet

Cracker Smtp Master V6

C2

94.156.66.178:8080

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Cracker Smtp Master V6 by aron-tn.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections