Behavioral task
behavioral1
Sample
C037A2D164F8327B4236D4A4A22FBD3B676C4B94A2245.exe
Resource
win7-20220812-en
General
-
Target
C037A2D164F8327B4236D4A4A22FBD3B676C4B94A2245.exe
-
Size
140KB
-
MD5
91e968680786195eb4ad5c2205b18b92
-
SHA1
d2638bfdb9f20fe462e511e02118b0af91138ff3
-
SHA256
c037a2d164f8327b4236d4a4a22fbd3b676c4b94a224513844960e0839e60ef3
-
SHA512
adae0315d17f74f47549f7c5bfd9344359fb8aa68f71b82d232d2dd4c88db223adb55d8195020a74f79367c5595333f1ca5aff76b3d5b14c7aec2dabcb654dfa
-
SSDEEP
3072:CYO/ZMTF4ZJsorQLrtvaAZiVPDF3y5Pqh5SSQn:CYMZMB4ZJsH/tvaAZ+sBqh
Malware Config
Extracted
redline
@rodjerss
77.73.134.24:80
-
auth_value
f5a1a84fd7de7d17cf8aff08f185d328
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
Files
-
C037A2D164F8327B4236D4A4A22FBD3B676C4B94A2245.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ