Overview

overview

10

Static

static

10

aa3c5ebcb2...18.exe

windows7-x64

10

aa3c5ebcb2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa3c5ebcb2a49c1d17e0d57b1e515d95_JaffaCakes118

  • Size

    100KB

  • MD5

    aa3c5ebcb2a49c1d17e0d57b1e515d95

  • SHA1

    9d2ec9edfebf4cbb38342b7a41904def7c53b885

  • SHA256

    dd015fe4a916f31b5b650bd6d787c594119b09ee523f046a68dbdd725ba04c5f

  • SHA512

    4c34b822062c8a3dfae00923e554e7326d7b94af3e385bc35fc2cf9c075e817fc41b7bc9d108d762d1ac7d7add396488b52d1987505a9ededfced14c0b9d1c87

  • SSDEEP

    1536:Sm386AEA+RlBR8AiKJQcobIqqdNQzR7ttgbue7vSuvNyAldW7i1xQeTEiG6WAaop:Si86AdWdMPcouQzRxC3Suly2dbsvw7

Score
10/10
@steworredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

@Stewor

C2

77.220.214.232:13459

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa3c5ebcb2a49c1d17e0d57b1e515d95_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections