Overview

overview

10

Static

static

10

aac171c58b...82.exe

windows7-x64

aac171c58b...82.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    aac171c58bd09ea8d8e1a1823799f682

  • Size

    94KB

  • MD5

    aac171c58bd09ea8d8e1a1823799f682

  • SHA1

    ce50cc8940b7aa0b04ae7a3820487081778d8822

  • SHA256

    73ea6f58fea5e2d7440bbf1fa6c26ee9e06a2eb0906291ffb3d8def0f9fa523f

  • SHA512

    5b6edb9148064561d331da3bc30b4fbfaf00575aa3f51d8ffb166ce33845987dfe69ba114606fbbbbe616da85501027c99148e81f8b440a40855510fdc48899b

  • SSDEEP

    1536:g3LNmock5nvRGeADKsBwUJFusmbfexvmuvbyyedgJ8NqCxXsEdG6ijoiX:gxmocdrJMhgmujyzdcSnC

Score
10/10
@keynejkeeredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@keynejkee

C2

45.12.213.248:36372

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aac171c58bd09ea8d8e1a1823799f682
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections