Behavioral task
behavioral1
Sample
2f2b059f28121a74d3d56189c02692387e5c0469f89ad091ee49a1eebce92cc2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2f2b059f28121a74d3d56189c02692387e5c0469f89ad091ee49a1eebce92cc2.exe
Resource
win10v2004-20220901-en
General
-
Target
0dcb7f44095aa1afbaf134b107d8efd1.bin
-
Size
50KB
-
MD5
5375e4d64d7567ad02561953fd4ed840
-
SHA1
0f195d62483d5a7060e299fb024f8e0a8ad72e9a
-
SHA256
451c729e0e6a1f45c6ea51a95ff9bee4b5cb1dbb2e8c8ef635f66d652d681cfd
-
SHA512
d69cfd06c3111fbbe11b5c43c4eeb4e1b86ac3eccc25a9687af0d8ebccb36af162268a478ad031307c2827da763d7c1c1e05b5945353b03cff0fde607554b367
-
SSDEEP
1536:WNAaun8ek2ZaQwmEgw84spVLB5wz5DYr5ZZSG9vsg:uAaun872ZHwmEPc5y5kNZZSG9vv
Malware Config
Extracted
redline
@avangardow_krutim
168.119.228.126:11552
-
auth_value
7d477650adea2e459a346ec55a0c86ff
Signatures
-
Redline family
Files
-
0dcb7f44095aa1afbaf134b107d8efd1.bin.zip
Password: infected
-
2f2b059f28121a74d3d56189c02692387e5c0469f89ad091ee49a1eebce92cc2.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ