Overview

overview

10

Static

static

10

b5487c6fee...07.exe

windows7-x64

10

b5487c6fee...07.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da55eca7312d7a5d92c5d0ae37558942b4f51a8b306c97f70cabb66185da56b0

  • Size

    41KB

  • MD5

    1701637367638afb2e1b2fb00e60010f

  • SHA1

    722bd93bd1376c3b6cfaf65ab2e44c8577233eb6

  • SHA256

    da55eca7312d7a5d92c5d0ae37558942b4f51a8b306c97f70cabb66185da56b0

  • SHA512

    495f181d5d8948f4d07fd8bb39689b42b593d834c5b6816d76bd1bdf1b5c8ad634692434cd352f5c7338e8e2d85edd20974c2bd83c5d612ad9a3c6fab6d83c17

  • SSDEEP

    768:DG8bWb2j2IZu8+jqN4VVAyJOPvRsqq511tWsJ2qfehFaq:DG8N2unsqN4PrJwJsqA1P3gFx

Score
10/10
@ownsunriseredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@ownsunrise

C2

103.246.146.46:38192

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da55eca7312d7a5d92c5d0ae37558942b4f51a8b306c97f70cabb66185da56b0
    .zip

    Password: infected

  • b5487c6fee0d0231269dee63f8de962bd541034f7b267df6f21b361296a87007
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections