Overview

overview

10

Static

static

10

c5a97c768e...f6.exe

windows7-x64

10

c5a97c768e...f6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aca66e14ad1a72b7a5784d55f6a277f709a016517cc14b388153526af453c753

  • Size

    43KB

  • MD5

    54d7ff2b380b7e42cfef4edcee3ea444

  • SHA1

    01eb65d7f68d6c49535089bd55dd046fe1ee4e70

  • SHA256

    aca66e14ad1a72b7a5784d55f6a277f709a016517cc14b388153526af453c753

  • SHA512

    75ed5cef10bbcda591f9c5304699f94808a8461c6ea5a32b31795b798009247c77c5ecba40947ee1a5a45feeee954227bf396f002e3820b7ff8c900fd19e30da

  • SSDEEP

    768:R/vmuLhQizFfe269n0s2i7UvqoMCan3AUSI6HNhHexxWGo/LniyQSkqLR07Y:R/uCeizFmF90s23v7KQUitdex96DQ60E

Score
10/10
skullb3astlogredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

skullb3astlog

C2

5.180.155.87:64765

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aca66e14ad1a72b7a5784d55f6a277f709a016517cc14b388153526af453c753
    .zip

    Password: infected

  • c5a97c768e7ba609346fe283ab8be115e1279edd50e672a89eaa9c1693cf4df6.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections