General

  • Target

    4aabd80a83e4779a6a78dc0a74bbf824cc029c06e3c4db75867dbd88405c57dd.zip

  • Size

    31.1MB

  • MD5

    697914f873fcb86e823c3f2b0970b939

  • SHA1

    585671004abb15a6eca11fba8f52f5e36b080e47

  • SHA256

    4aabd80a83e4779a6a78dc0a74bbf824cc029c06e3c4db75867dbd88405c57dd

  • SHA512

    b183901057a2270a380a6db46759bff34332262f00082192b1a5ffe0ceba546a10fa4fc6a925cfbe47b5b712790637c6ac06f7b9e114b23957bdf5b087109f9d

  • SSDEEP

    786432:kHX9zh3enZs4ftNhK1tIR+nba5bKnXTTZ7PVau7My9IbZKWBmT:Ytzwi4lvg4+Won1VauX9moWB2

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4aabd80a83e4779a6a78dc0a74bbf824cc029c06e3c4db75867dbd88405c57dd.zip
    .zip
  • github.software.v2.5.1-beta_access (Win Version)/KeyFile/1033/sharedmanagementobjects_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/KeyFile/1033/sqlsysclrtypes_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/KeyFile/1049/sharedmanagementobjects_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/KeyFile/1049/sqlsysclrtypes_keyfile.dll
    .dll windows:6 windows x86 arch:x86

    7ccb9c5f3f9fc1eda5b1015ecdb98e95


    Code Sign

    Headers

    Imports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/SqlUserInstance.rll
    .dll windows:6 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/de-DE/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/en-US/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/es-ES/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/fr-FR/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/it-IT/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/ja-JP/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/ko-KR/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/pt-BR/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/ru-RU/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/zh-CN/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/Resources/zh-TW/SqlUserInstance.rll.mui
    .dll windows:5 windows x86 arch:x86


    Code Sign

    Headers

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/SqlUserInstance.dll
    .dll windows:6 windows x86 arch:x86

    b0547bab9ed2aabbbfc847c2d4a998fe


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/LocalDB/Binn/localdbxeventconfig.xml
  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/Shared/xe.dll
    .dll windows:6 windows x86 arch:x86

    a717c506893e6eb4a4cd9bdf05e01b92


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/backupkey.dll
    .dll windows:5 windows x86 arch:x86

    b4a7bee3cffac50c8a971d661e465c11


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/150/genkey.dll
    .dll windows:5 windows x86 arch:x86

    797c6bfcf34edb0c460e753dd6ef5abc


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/License Terms/License_SQLNCLI_ENU.txt
  • github.software.v2.5.1-beta_access (Win Version)/License Terms/SqlUserInstance.dll
    .dll windows:6 windows x86 arch:x86

    f2b222e5b77bb5e02c203c041a4e8c66


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/Setup_v2.5.1(Modificated Version).exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/data/Engine.dll
    .dll windows:6 windows x86 arch:x86

    baa93d47220682c04d92f7797d9224ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/data/data.u
  • github.software.v2.5.1-beta_access (Win Version)/data/linc.xdat
  • github.software.v2.5.1-beta_access (Win Version)/data/remote_settings.ini
  • github.software.v2.5.1-beta_access (Win Version)/iconengine/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/libEGLl.dll
    .dll windows:6 windows x86 arch:x86

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/libeay64.dll
    .dll windows:6 windows x86 arch:x86

    0ab3c0ccca6cffc5857fa9eaa9166822


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/platform/win32.dll
    .dll windows:4 windows x86 arch:x86

    348455ac79d3a5ef49002e19f2d2acef


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • github.software.v2.5.1-beta_access (Win Version)/platform/win64.dll
    .dll windows:6 windows x86 arch:x86

    9d6607e0bc6f62711cae201eebf31e8b


    Code Sign

    Headers

    Imports

    Exports

    Sections