Overview

overview

10

Static

static

10

c801461a98...cd.exe

windows7-x64

10

c801461a98...cd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c801461a98cbce938de83c79c1341fcd

  • Size

    166KB

  • MD5

    c801461a98cbce938de83c79c1341fcd

  • SHA1

    0c382ff0383f74f947f1bbc887e8ca3600e96112

  • SHA256

    eeecf38980be2eed522b961b55f5c197c09507e6f9a9600fc4524eb43e63f9ee

  • SHA512

    12edac2da192374bd73f5256326423adf3a86541227deb3c2b0e77b57cacd5741f868ce8d10a472b61b4852ad0bc1c2e2cd15a0c80e5ad2fa1369b4f80bb9008

  • SSDEEP

    3072:mi86AdoWC0doPuEQzpzQGulydd1svUB7m:17AdVnNv8NyOu

Score
10/10
fbtraff1redlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

FBtraff1

C2

185.237.165.126:25598

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c801461a98cbce938de83c79c1341fcd
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections