Overview

overview

10

Static

static

10

2fe3f6fc8b...19.exe

windows7-x64

10

2fe3f6fc8b...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fec851c3add3e7a3d1eba5a947de389ae49519c350ece746faed63370378612.zip

  • Size

    48KB

  • MD5

    97b4c35f15605b06e4fd00091403684c

  • SHA1

    587ab22ea308c25cd321fb6c2f3e27dcf6a6979a

  • SHA256

    2fec851c3add3e7a3d1eba5a947de389ae49519c350ece746faed63370378612

  • SHA512

    13d587104f9c2723ca4b30eeb2cafd8451b30445ed9d6f984dcb0e56b908e9e5ddbd5f2a403632aa09fe57b671de0f39f16039545e375848593230b6058b50d5

  • SSDEEP

    768:IRd7QB4TiBZp28v+t55sVmci1V51S3AJF8/eG5oSilhzeWfnX71sy9clViH:8u7Zp28vw1n1VHIAsL3wX7nulUH

Score
10/10
utsredlinesectoprat

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Signatures

  • RedLine payload 1 IoCs
  • Redline family
    redline
  • SectopRAT payload 1 IoCs
  • Sectoprat family
    sectoprat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fec851c3add3e7a3d1eba5a947de389ae49519c350ece746faed63370378612.zip
    .zip

    Password: infected

  • 2fe3f6fc8b9b9f4d1bddc0e97ddd64229da2a069cf199bcd435d14a3e27e4e19.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections