Overview

overview

10

Static

static

10

b42512d71c...f9.exe

windows7-x64

10

b42512d71c...f9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b42512d71c3f14e98719d6036148f8f9

  • Size

    107KB

  • MD5

    b42512d71c3f14e98719d6036148f8f9

  • SHA1

    7166dc2dc94be9a039907ab5815b8bb92459300d

  • SHA256

    9c1ddfa908ee08b1e2efedc8a6e9a00cccbaa941a927f210fb15ea0ad781b57e

  • SHA512

    256cbf200062e1a8867a1e991c771209abe6eae6774231b4bc857c2fe5dce84b9a7b40d38f52c18753abedf325be16f881061fec2417c8412151fbf6d775ab29

  • SSDEEP

    1536:Kt9pmyDBq2OeYWdOimpYIWnabzjbuqGdJn2uyq+d4+ydDjECG6qTaoig0:YjBq27YaZmpYn6GJndyjd4lYPE

Score
10/10
v2redlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

v2

C2

195.2.78.163:25450

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b42512d71c3f14e98719d6036148f8f9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections