Behavioral task
behavioral1
Sample
71ef9c05754dbf3165f015c857573e05ce4ad5b9dadff0e1ef0f5a30e29d877e.exe
Resource
win7-20230220-en
General
-
Target
71ef9c05754dbf3165f015c857573e05ce4ad5b9dadff0e1ef0f5a30e29d877e.zip
-
Size
51KB
-
MD5
80007300c3621cef55f439a8e0aa1e51
-
SHA1
d386b95b9e42d1a572fe11c49c6fe323bc770ab5
-
SHA256
ec103a59066f6d7b1282784bf75b9236839f9b6e5a7d909ed76dd7c7652cb7a3
-
SHA512
cfa62d9213b69f61f71250ac23abf5defd0d8886856f1392cb03c1654f66fc73fdee51ecde3fde1fde617c544def34ab7a0ecef1c83fada8b6bbff6fe74e02b7
-
SSDEEP
768:atG/l++VpIvJGxNH+Uh4/GJWmgUNx7he1s8CN6xorL20A6pf1EdtWTdjDNd:aM/o+yUU/ez7sNxCyLkeAxDNd
Malware Config
Extracted
redline
dent
193.233.20.33:4125
-
auth_value
e795368557f02e28e8aef6bcb279a3b0
Signatures
-
Redline family
Files
-
71ef9c05754dbf3165f015c857573e05ce4ad5b9dadff0e1ef0f5a30e29d877e.zip.zip
Password: infected
-
71ef9c05754dbf3165f015c857573e05ce4ad5b9dadff0e1ef0f5a30e29d877e.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ