Overview

overview

10

Static

static

10

build.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    build.exe

  • Size

    95KB

  • MD5

    5b228777049a5eee4284d4d68180a0d2

  • SHA1

    6fc8f38f3a0fb7e4c48fa351d4a3ebaa75bbfbae

  • SHA256

    e57520c78ba738eb5592c96d20dc1c184cf382ef076c4d8e5ddc10f2153e4398

  • SHA512

    5dfb9fc322f9030cba771d87a06d99146773cafacfb922253b0e07a20a83f14e836ce397ff6557bcaa87d46454793b4926efda2c22763405971ddaa5c7494e1d

  • SSDEEP

    1536:5qsCbqDylbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2S3tmulgS6p8l:XEwiYj+zi0ZbYe1g0ujyzdw8

Score
10/10
cheatredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

20.ip.gl.ply.gg:6434

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • build.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections