Overview

overview

10

Static

static

10

b770d8b2f9...7e.exe

windows7-x64

10

b770d8b2f9...7e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b770d8b2f9350573826f9ea566260e7e

  • Size

    106KB

  • MD5

    b770d8b2f9350573826f9ea566260e7e

  • SHA1

    a3c8dcc616f9595e7eb7c3f17cc1293a95cc9648

  • SHA256

    dcb25316bc3b1978f4acb2cce9804787843d832b46939195550ccdfc2f7f947c

  • SHA512

    2076cff5c5d30aeafa60ec6ccfb594bbc273513ca7c6101b78165e72241291dbd2389882695dd73e7897cc5aae4d2e3e5f7e9732ac88d185ca82d41e50599a16

  • SSDEEP

    1536:IxPQVLAufQYcrA/M+UePwN0oKfDRjbuFGdRnQuyqlddVsWOE5G6eRaoigK:KkAuIYuX+UaZxRn3ywdd/Jy6

Score
10/10
@takeo_m2redlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@Takeo_m2

C2

3.121.85.109:62340

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b770d8b2f9350573826f9ea566260e7e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections