Overview

overview

10

Static

static

10

fd3b745c27...18.exe

windows7-x64

10

fd3b745c27...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd3b745c27f7adfb6cd4fc67dc0ab913_JaffaCakes118

  • Size

    98KB

  • MD5

    fd3b745c27f7adfb6cd4fc67dc0ab913

  • SHA1

    9dac76c95d0be77f19da9aac0cc626ceaf27de13

  • SHA256

    a84ded1b7c24e9db84db30fd9a0e7ab189cfb14c90452d95db12f20b9360c583

  • SHA512

    706758e345536f361bc3f4c8cbd6089bd73ea15f8e3e50912b655dac551014c73b90dbe6e53026624a2540c1ccdd13ab4e4497584028a4f0864de01f4643abc7

  • SSDEEP

    1536:aW3LNmocOwYT2tfmmPF1CIJFMsmbfexvTufUyyedgm3/qCxXsECG6ijoigz:9xmocuuJ2hgTuMyzdaSnU

Score
10/10
884967607redlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

884967607

C2

188.40.193.166:43180

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fd3b745c27f7adfb6cd4fc67dc0ab913_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections