Behavioral task
behavioral1
Sample
eeb900ee8782e3f2137cd058f303340c4011eda840d0140176c5451344316301.exe
Resource
win10-20220812-en
General
-
Target
eeb900ee8782e3f2137cd058f303340c4011eda840d0140176c5451344316301
-
Size
175KB
-
MD5
f74db52dd945d029582825d2895e7037
-
SHA1
a65f2d2ef6e179b4fbc36d837cc9798a6a2f92ea
-
SHA256
eeb900ee8782e3f2137cd058f303340c4011eda840d0140176c5451344316301
-
SHA512
810146990e12b5c7eb91fba7821d20b08b7cb66fc6e1685d4c6d9523139da2025ff4beebb74e3a5c157ee6cf3f424e37bac5c5152e15765c05762a04542d1927
-
SSDEEP
3072:fxqZWkDaa5U5sg9tbMROUqcwveM89MhKrxNn2pU9f2MKTV/wi4lr55R9TxlnsPs0:JqZOMROLv0Mh
Malware Config
Extracted
redline
fusion5576
82.115.223.15:15486
-
auth_value
753ffa8a1d1a43c99861250844ebfe39
Signatures
-
Redline family
Files
-
eeb900ee8782e3f2137cd058f303340c4011eda840d0140176c5451344316301.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ