Overview

overview

10

Static

static

10

d26ecad2f1...18.exe

windows7-x64

10

d26ecad2f1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d26ecad2f1da070dbdde7a3a36109175_JaffaCakes118

  • Size

    262KB

  • MD5

    d26ecad2f1da070dbdde7a3a36109175

  • SHA1

    b58f8439f7f602355b284518463dfa49633c4c90

  • SHA256

    aa3ef811cfeacbe782715219b91eb5f798780b6e81a3dd31eb4c2a8851689b54

  • SHA512

    14afc0922789281fce926e69ee54f7f72260d47f92600c2ba41f15fb6ad793e4763e71acd5966d9dc37e8524c74b6df0c947e1633a092c66dad0d5f912c30816

  • SSDEEP

    1536:Bm386AEA+T2BX8bPm5AvkAK6yBGQzi7bgbue7vVuvNy6sddNi1xQeTEmG6WAaoif:Bi86AdwuTAxQzi43VulyLdesvkJwj

Score
10/10
fbtraffredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

FBtraff

C2

185.237.165.126:25598

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d26ecad2f1da070dbdde7a3a36109175_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections