Overview

overview

10

Static

static

10

331559f446...74.exe

windows7-x64

10

331559f446...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    331559f446e2f5b9a675db07ee93a274

  • Size

    95KB

  • MD5

    331559f446e2f5b9a675db07ee93a274

  • SHA1

    3cc3679f64d7860239d880e45c22680944cda964

  • SHA256

    560f15c0edf202d61a78c0403475ac91603a6415712b8f8fc82797cfd2ef000f

  • SHA512

    08060f616fbb0d9f5ac7a83470fb18936bef1d4b0d059243b0d9f0d98873cadf1ffeeb676e14b737aa727df9f8724418601c6ee0b04917e9508e0598c6998200

  • SSDEEP

    1536:9HqsgEq76ElbG6jejoigIY43Ywzi0Zb78ivombfexv0ujXyyed26tmulgS6pM:91V+68YY+zi0ZbYe1g0ujyzdmM

Score
10/10
billybanksredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

BILLYBANKS

C2

7.tcp.eu.ngrok.io:13616

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 331559f446e2f5b9a675db07ee93a274
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections