General
-
Target
280e4a3b876dfec4eae15ab771acf32d6ae5ff2c4c52cf4d21472ff06ce7e2a1
-
Size
337KB
-
MD5
9e33aa6726d2545737f3fc506bbf35b3
-
SHA1
c0620f01a27248d4f91c2e94a7f63ef2b371bf0a
-
SHA256
280e4a3b876dfec4eae15ab771acf32d6ae5ff2c4c52cf4d21472ff06ce7e2a1
-
SHA512
62e91137fd8aaef704c339aac9106f980e93cef8a529d918943a4857e5ceb6d4e6bab8f3b55542ec874d19680e03f7f734efc11425a7feab5f79c0f1660dcf61
-
SSDEEP
6144:nbDQmioYCCAYp5fRZOVANlZ1iJ5ZccG7uMR9NX23BoIgPEDZCO4lw1JedPlC:nbDQ7LpDcVAN1lDm3BoIgPEDZCO4lw1H
Malware Config
Extracted
redline
24.01
37.220.86.164:29170
-
auth_value
1c7f0aa21138601b5201a3a4a0123991
Signatures
-
Redline family
Files
-
280e4a3b876dfec4eae15ab771acf32d6ae5ff2c4c52cf4d21472ff06ce7e2a1.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ