Overview

overview

10

Static

static

10

014b8a8f38...64.exe

windows7-x64

10

014b8a8f38...64.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf852e50e51c5ad571739b3a85b23cc115e6c42f21d76f296258c55ff2021d33

  • Size

    43KB

  • MD5

    a34673eedf08be6834f09886c245015d

  • SHA1

    f0cb733b99b11b5efdbe85c632a25baea9e81e33

  • SHA256

    cf852e50e51c5ad571739b3a85b23cc115e6c42f21d76f296258c55ff2021d33

  • SHA512

    3cd9d6f7e6e6643abc01358c4e75cb5ea7131fe3d0e638d28cc2119d32ffaa318efb679f2299eb0adb39d112640ea08ca38cb2e3e98ef3981b84ba9b8680ff6b

  • SSDEEP

    768:uqUzOteZoel7g75F1bQrZfWC8p3m98+lhKZsP98V7gL:uzzOy7g7zGr8VK8+lhKZsv

Score
10/10
cheatredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

127.0.0.1:1639

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf852e50e51c5ad571739b3a85b23cc115e6c42f21d76f296258c55ff2021d33
    .zip

    Password: infected

  • 014b8a8f383e2e1535d3d382851529d77e149a71f312db1518bb40a14def7f64
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections