Behavioral task
behavioral1
Sample
320-56-0x0000000000080000-0x000000000009E000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
320-56-0x0000000000080000-0x000000000009E000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
320-56-0x0000000000080000-0x000000000009E000-memory.dmp
-
Size
120KB
-
MD5
655b055f056c03fcc3ec886bf4a9b573
-
SHA1
91f3da83e2c7abd1230fba61d421489495023cce
-
SHA256
384e80481a5348706b750fcbb78b82a5504ef9f1fb075f0585783758d749783a
-
SHA512
aa233c65cb1ef4e2e13363258efbcf5d28fdd73439827b1c542e8dcf3ef5d50e5c86623f4e40c7c8b4dd1f63218278571309eee372e76d53737967c032a32bd7
-
SSDEEP
3072:jx1EqcZL2MEU4WcILg8LbZnMc/QIzKVqk/AI/obr9:Nk2Ma8hm/qr
Malware Config
Extracted
redline
5121940512_99
soccerschoolio.xyz:3306
soccerschoolio.xyz:28786
-
auth_value
b2bd789e382f723abb14d658fc457e8f
Signatures
-
Redline family
Files
-
320-56-0x0000000000080000-0x000000000009E000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ