Overview

overview

10

Static

static

10

KinalHack.exe

windows7-x64

10

KinalHack.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d0acd396ccdd1274dd584ed6c382dda

  • Size

    56KB

  • MD5

    7d0acd396ccdd1274dd584ed6c382dda

  • SHA1

    eaa1e74310defce551226ec44d2874db95ec6a65

  • SHA256

    d03b76eee17f976f97a11c3af2c5c3309bcaa3166b4a76b79cf2b38a8af72a40

  • SHA512

    cfdd56d067000562097bca58b53346567a4146841b30bce0e0e6be2af9f3c7dee9d4801c2082e1eba539e8d48c3e441a8bb85513f71ba04af2fef3dae6c7f4c3

  • SSDEEP

    1536:SXtuQuFz2sE6JnVKNhc+1sdTKNQIpc16BtkUIfsK:S9DIEyKNb1s6jc1ykeK

Score
10/10
cheatredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

82.202.167.202:8303

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d0acd396ccdd1274dd584ed6c382dda
    .zip

    Password: infected

  • KinalHack.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections