Behavioral task
behavioral1
Sample
21c63293a13296dc293a0e5a775b0146.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21c63293a13296dc293a0e5a775b0146.exe
Resource
win10v2004-20220901-en
General
-
Target
21c63293a13296dc293a0e5a775b0146.exe
-
Size
97KB
-
MD5
21c63293a13296dc293a0e5a775b0146
-
SHA1
e9f7665b02c8e44f3b80ed4fd28816201cda89da
-
SHA256
50cf840ea1c68345adb398c5c3f33fcbadd750a095b5687d7a5735aab7088824
-
SHA512
393263f08d45c5fe676ffe1b5d7958d7211349ba63835ca33fb878e2c5ba149c86b9aeee32f8e8b5ec07a008f2e3be41467ec4fc42237b5a6427b3cb2c6cacea
-
SSDEEP
1536:yj1yw39pOq7JkjAYOrOyitVC7uMqBcQjloJQYr4hUndpAz+WTxXv/K:yj1yk0AYQOyiRwOIihUndpFWV/S
Malware Config
Extracted
redline
NGONDUNGVAO
103.74.103.52:24343
-
auth_value
c26fcf86ed5f26d2fadc52a8f9ea2e4c
Signatures
-
Redline family
Files
-
21c63293a13296dc293a0e5a775b0146.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ