Behavioral task
behavioral1
Sample
98360-56-0x0000000000400000-0x000000000041C000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
98360-56-0x0000000000400000-0x000000000041C000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
98360-56-0x0000000000400000-0x000000000041C000-memory.dmp
-
Size
112KB
-
MD5
14ecdd0e9b20fa552f7f1cad5ca494ee
-
SHA1
a5325988298674025b111d5bb12fee052f75de79
-
SHA256
ab1e95294c2cd49aed8ecaba54b3d20f6031e0f473f40fa90d19800fb4e15d25
-
SHA512
420370beaa6bbc64824f3358ef84215b43c9a59854a83fde5407f871f93d65054d3fd896639c8845cfb6233e54435415eb40d7bf0aab2629b1b475da6ab39cd6
-
SSDEEP
1536:CBJwfF24QgWK7+h12NGleSqOwxwAbrwStUHrGdxT:OJwF2O81SGoSgLGrS
Malware Config
Extracted
redline
79.137.192.9:19788
-
auth_value
85b9d73ac757ba09817c4462d853dd3d
Signatures
-
Redline family
Files
-
98360-56-0x0000000000400000-0x000000000041C000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ