Behavioral task
behavioral1
Sample
bfd619824cfacf9efaae7ddc955c1153.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfd619824cfacf9efaae7ddc955c1153.exe
Resource
win10v2004-20220812-en
General
-
Target
6563dbbd7720ae58e8337c8485a8aed9-sample.zip
-
Size
41KB
-
MD5
963d0024b8bcead2456ad3331f72d0d6
-
SHA1
1cbb467bd5e1d4ab988b8bb99197c8213302d748
-
SHA256
269ff1ed5651eade5100d96b4778d3e9ff8610aee5220c9b90548bbbb1978df0
-
SHA512
e4724bbce1f8755cacdda604e792f8faf2b02ace589e4a45a3c70b8b54e07ac968badd2914edb1af3f36feedbe8d52f1baff7364ea099808f2e156f438f4023b
-
SSDEEP
768:gAb/Wyfe1VCeUGj3IHGkPt9OddmfXJHhrMUy6c8ucUD0hUFBPSb/XQdp5W:gW/dKCeUGcHvOdd0XjgUy80e/XQdpk
Malware Config
Extracted
redline
79.137.192.9:19788
-
auth_value
057606ad44a7951394a4fc38c61f1a6e
Signatures
-
Redline family
Files
-
6563dbbd7720ae58e8337c8485a8aed9-sample.zip.zip
Password: infected
-
bfd619824cfacf9efaae7ddc955c1153.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ