Behavioral task
behavioral1
Sample
836-57-0x0000000000080000-0x00000000000B2000-memory.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
836-57-0x0000000000080000-0x00000000000B2000-memory.exe
Resource
win10v2004-20220812-en
General
-
Target
836-57-0x0000000000080000-0x00000000000B2000-memory.dmp
-
Size
200KB
-
MD5
b30cd9d28791666b4252562223427ad9
-
SHA1
6ae45899c5e5c8f3a70255e567fd1b59ff0c9065
-
SHA256
a9c1b45d6531a9aaa089b5a720d190414b29cb87fb6a61735169927ba795b5b9
-
SHA512
dda91457c125918c07e74dc6d69319681d1d196710fefe46af3f4f201d4011254d0a1b9a43993cfd2a6a5e262ec7e7440d1991eccc70af244ba64c5e7887149e
-
SSDEEP
3072:AxqZWRZazkTcCvhMkRq4X9eb59yh2vxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0t:uqZ8vhM8hXEyh
Malware Config
Extracted
redline
@2023
79.137.192.28:20723
-
auth_value
93b4b7d0dc8e9415e261a402587c6710
Signatures
-
Redline family
Files
-
836-57-0x0000000000080000-0x00000000000B2000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ