General

  • Target

    b4a7d1e6d919ce4767dc0fd37d2594bab3fd07c7630020e6e9dc9ec166947dd2

  • Size

    95KB

  • MD5

    a24c8182b414b68c7bb4de20b944d8e1

  • SHA1

    b21cd7fdf48103d6e64a69176cd1edf0554b9b3f

  • SHA256

    b4a7d1e6d919ce4767dc0fd37d2594bab3fd07c7630020e6e9dc9ec166947dd2

  • SHA512

    92b5df941b6c3fbaa119682445fb93834c0102e4d49974630bf046088b0716dbc16def332110399b8df978e66fac8b8d9734a91593871de6d2fd0f465d194afa

  • SSDEEP

    1536:1qswlqWWlbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed2/3teulgS6pg:zgReY/+zi0ZbYe1g0ujyzdzg

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

127.0.0.1:57857

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • SectopRAT payload 1 IoCs
  • Sectoprat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b4a7d1e6d919ce4767dc0fd37d2594bab3fd07c7630020e6e9dc9ec166947dd2
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections