Overview

overview

10

Static

static

10

c552f8bb42...df.exe

windows7-x64

10

c552f8bb42...df.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c552f8bb42dda0e335569cd54dbd55df

  • Size

    97KB

  • MD5

    c552f8bb42dda0e335569cd54dbd55df

  • SHA1

    fc4b96b7521060e05ef41c212a3d007a9f3605c3

  • SHA256

    e8a9da73086944791b034614fe960e9776d07566f5e583a124bc243549e76858

  • SHA512

    2c9476dba899f22a1d66ca2b364fa6190753e5268d5244d7c30eab683be7bbc44b11bb507f96f659dfc033def0430249da1f348c54465fbbb87acc8f9a78bce6

  • SSDEEP

    1536:DG6ijoigJqqy/QP1et1rTsz+xQLJV0buXdxyadpCl3O4xwEEB:UUeXsyKrM+xyay6B

Score
10/10
@winterchxredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@winterchx

C2

45.82.179.116:10425

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c552f8bb42dda0e335569cd54dbd55df
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections