Overview

overview

10

Static

static

10

a55b390780...e0.exe

windows7-x64

10

a55b390780...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dcececec2d0505caff736903025f94774d783363553e43de1f31388ca9edcda1

  • Size

    43KB

  • MD5

    b0a3c598f5b87270857580e8e16efb64

  • SHA1

    b9f73f1b2b9daeac0186cbd4459f5b3cb5630db4

  • SHA256

    dcececec2d0505caff736903025f94774d783363553e43de1f31388ca9edcda1

  • SHA512

    ac6d992feae667188932e68d331091a287b0d807ded62597d3862bc39692daa4aaffe994cacb16db8095b0c6da6cfa077dcd635bf9f2ff6c94c7f0a5c4cc8612

  • SSDEEP

    768:6D5oFIozrEbgy66FM1hDfBzrkDV6iS5b1IEYY8SLhLe28hmk7+mcf:6D2IeSBi1hmDVvSMZY8r+kFC

Score
10/10
setupredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

Setup

C2

136.175.8.52:29509

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dcececec2d0505caff736903025f94774d783363553e43de1f31388ca9edcda1
    .zip

    Password: infected

  • a55b390780a73c57def061b3d575f952e96221dab4e04d8f4b8bf213f624d3e0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections