Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
General
-
Target
file.exe
-
Size
175KB
-
MD5
cbf15f76a9ee3d8f0faaaecc1565e74d
-
SHA1
87d7dd0fad1bfcc00557c163880d354122d99d60
-
SHA256
daa06845dcb265e14097bdafab9f9ace60fb6860591563ecada561f50ebe4b60
-
SHA512
9ddcc7b94711ceca6a00b1c680f05fdb0ad94ad45bc3b301caec65a4a56cbd5471354a23002dd30e994283b38abe8725322bb642095aaf3680774aa981cec3da
-
SSDEEP
3072:QxqZWFlaSEW8vxLZ9AKYess9Wh6TxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jO2:+qZlxN9VxWh
Malware Config
Extracted
redline
fusion8888888
82.115.223.15:15486
-
auth_value
32c8c12728d340f6762d97ec9b3f8e53
Signatures
-
Redline family
Files
-
file.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ