Behavioral task
behavioral1
Sample
2fef2269b229f5f0e47be63b7f635ca40184345384c1bff32a8ce7678a3c18a7.exe
Resource
win7-20230220-en
General
-
Target
2fef2269b229f5f0e47be63b7f635ca40184345384c1bff32a8ce7678a3c18a7.zip
-
Size
51KB
-
MD5
663fa2d366f99cc0962011e46ab45cb7
-
SHA1
a482099d3edcfb9914c092e92c74b54a7a3d0b14
-
SHA256
04c6a3f5a861b50425032f34ddc7f73c893113f681563c3b75b7576f6774bf72
-
SHA512
47df0780cb61253bf4e3f3008eb46bfad8085c28434891d80a883847a2645dd8d2a5246f83e1e24c384da5ad42f2bb250450838cc08280a9a3f4d1b3e0eaf22b
-
SSDEEP
1536:9zqji9WNuVHbtJMvGvdrLg8i9jzrY/GsyWc4+T:9zZ6udbtJMGN3i9PvjhT
Malware Config
Extracted
redline
luza
176.113.115.145:4125
-
auth_value
1261701914d508e02e8b4f25d38bc7f9
Signatures
-
Redline family
Files
-
2fef2269b229f5f0e47be63b7f635ca40184345384c1bff32a8ce7678a3c18a7.zip.zip
Password: infected
-
2fef2269b229f5f0e47be63b7f635ca40184345384c1bff32a8ce7678a3c18a7.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ