Behavioral task
behavioral1
Sample
a6c141f4b595fa7890fb913a293fc631.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6c141f4b595fa7890fb913a293fc631.exe
Resource
win10v2004-20220812-en
General
-
Target
a6c141f4b595fa7890fb913a293fc631.exe
-
Size
385KB
-
MD5
a6c141f4b595fa7890fb913a293fc631
-
SHA1
18bbe8f1e57c1dae3f5d5d43efa7a385529f0511
-
SHA256
4fb51bd2f95e5c6e068845279eef9bc59f150f1b359053a32be068fcfbb91238
-
SHA512
a7723f2e3b1430e670c2c4b3f7d148ede176fcff0f0feebf2f3bad8dc4d831679b82d44b3af563d8a43739c4432295f340190b4403b3e7cd8f2480af2bb532a9
-
SSDEEP
12288:GOf+EsR+wzmR3sFuTvMPaxzO1sp4N6R39+agZS:Ff+EsR+ww
Malware Config
Extracted
redline
@$I*ASHYLR568123sUSA=PCs
45.14.165.227:26316
-
auth_value
5d3f05d27e1d50887e97b4748b4f27d1
Signatures
-
Redline family
Files
-
a6c141f4b595fa7890fb913a293fc631.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ