Behavioral task
behavioral1
Sample
80c33e6c1bd1fa069757c079c94a4d5b0170a6856725cd442af11b7b1d4bb6fa.exe
Resource
win7-20230220-en
General
-
Target
80c33e6c1bd1fa069757c079c94a4d5b0170a6856725cd442af11b7b1d4bb6fa.zip
-
Size
51KB
-
MD5
c7509b1ad86cceedba47fca2147d64aa
-
SHA1
55d0c37409300b9d8433291e2fb27e580dde75eb
-
SHA256
daeead08cb7b6da7e013c50033e6a153f1d304956f9d178a057e01514ce3ec58
-
SHA512
a2c3e3afa074feb343f371517a4de699cd66aa06c862147349e44bbd9dd3874f525ed88bee317baf2f64eee6d4b494566e5b3472f45bfab7a2445d589e8cff60
-
SSDEEP
1536:+OuTeTnE72ASTtQX6MZPDjAWi6t3qRw4PgEgO645i835/:+JyTnE7HSiX6MZPDjAQZqfYv4N35/
Malware Config
Extracted
redline
fort
193.233.20.33:4125
-
auth_value
5ea5673154a804d8c80f565f7276f720
Signatures
-
Redline family
Files
-
80c33e6c1bd1fa069757c079c94a4d5b0170a6856725cd442af11b7b1d4bb6fa.zip.zip
Password: infected
-
80c33e6c1bd1fa069757c079c94a4d5b0170a6856725cd442af11b7b1d4bb6fa.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ