Behavioral task
behavioral1
Sample
4959ecdbe225976635a4be74548d955ed181ba257fb7c60bff4161d949eeb226.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4959ecdbe225976635a4be74548d955ed181ba257fb7c60bff4161d949eeb226.exe
Resource
win10-20220812-en
General
-
Target
4959ecdbe225976635a4be74548d955ed181ba257fb7c60bff4161d949eeb226
-
Size
175KB
-
MD5
88b8c269645bec66755fa50fb422e081
-
SHA1
a360e15d61f62fcbfddcaff876d3aa8837f8f376
-
SHA256
4959ecdbe225976635a4be74548d955ed181ba257fb7c60bff4161d949eeb226
-
SHA512
7f4a236d3f5fc537940a3ca6ff10bbb963a0763d77aec76deb2dae077d38a94d94bf45acd6bab8ba10fc8b63be073ddc700ccfea920621145b80febf1d9fd4f3
-
SSDEEP
3072:kxqZWVtaKUPLv0Lmm2AXBe4UFhh3bxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jp:6qZbg6MAhh
Malware Config
Extracted
redline
Uppppppp9999
82.115.223.15:15486
-
auth_value
77c03f0e80ea37bfeb70472b49e69bc8
Signatures
-
Redline family
Files
-
4959ecdbe225976635a4be74548d955ed181ba257fb7c60bff4161d949eeb226.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ