Behavioral task
behavioral1
Sample
35bc44c85ac01234d1688f6312b01bff7961d080b90f46f297fca5cdfbb0d264.exe
Resource
win7-20230220-en
General
-
Target
35bc44c85ac01234d1688f6312b01bff7961d080b90f46f297fca5cdfbb0d264.zip
-
Size
51KB
-
MD5
6c67e4ddc94b284ce521e827b4cb0dfc
-
SHA1
eb85bbfc47a9a30dd4eefa3beeb97d18d968b24c
-
SHA256
79d34d121edc6e39bb2ff722df46a84d40e16e51a1547abd19eb85d4e616cded
-
SHA512
919cdb4e3bcc65e91406fd95d6e02c897ddfab17240a3460f58bc6b15fb9b9329ea4a4fb7ea990c5a5a0b2e5c2266a069bb0807bfa21524d7f43fcde791df58c
-
SSDEEP
1536:WNtocHpP9nJmKx9tD/QtCBFJGKIeyok1eIjlx:MtT37DQUvwhe/gxx
Malware Config
Extracted
redline
reiv
193.233.20.33:4125
-
auth_value
5e0113277ad2cf97a9b7e175007f1c55
Signatures
-
Redline family
Files
-
35bc44c85ac01234d1688f6312b01bff7961d080b90f46f297fca5cdfbb0d264.zip.zip
Password: infected
-
35bc44c85ac01234d1688f6312b01bff7961d080b90f46f297fca5cdfbb0d264.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ