Behavioral task
behavioral1
Sample
4743bad8f6939aa7645a043208010c2a9e75fbbcbbc8ca597a0c2a74ce7b6cc0.exe
Resource
win7-20220812-en
General
-
Target
4743bad8f6939aa7645a043208010c2a9e75fbbcbbc8ca597a0c2a74ce7b6cc0
-
Size
50KB
-
MD5
d30af611ef85f34e304d07bf44d9c9e9
-
SHA1
fdc043ffbe428d1b4b0355f6f26d918334e551c0
-
SHA256
748a7948e4aa62ba39ddc5f3a8c880618d460ff9431e457f44b8557117e5f0d3
-
SHA512
9840da05af4bcc919da606e5ce30d1349e4ef71e5940ff95bfb1713b355401f45ff668da9c310166ffb3d8eec75b4c25fb131df3edef6906e5e184258987b1ac
-
SSDEEP
1536:ebVm+X8UjvB/7lEMBLtXozgTQvS5rssdDV7Y8lOQ/G:eRm+8UjBTlECto7S5Qs7Y8oL
Malware Config
Extracted
redline
wosh
31.41.244.14:4683
-
auth_value
f0ec85e2aaa9e62929e2fb9e09d843f4
Signatures
-
Redline family
Files
-
4743bad8f6939aa7645a043208010c2a9e75fbbcbbc8ca597a0c2a74ce7b6cc0.zip
-
4743bad8f6939aa7645a043208010c2a9e75fbbcbbc8ca597a0c2a74ce7b6cc0.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ