Behavioral task
behavioral1
Sample
86567a3c9dfa029ea1a409784c1c5c7decdbe4f0968d391d0b500aae176dbb12.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
86567a3c9dfa029ea1a409784c1c5c7decdbe4f0968d391d0b500aae176dbb12.exe
Resource
win10-20220812-en
General
-
Target
86567a3c9dfa029ea1a409784c1c5c7decdbe4f0968d391d0b500aae176dbb12
-
Size
175KB
-
MD5
2335fab40142d59620fea59cc50540c6
-
SHA1
65aae71a568af1c432517c81e7e6a18ca72ce6c2
-
SHA256
86567a3c9dfa029ea1a409784c1c5c7decdbe4f0968d391d0b500aae176dbb12
-
SHA512
6e9ed27e5fde861400fc5ef9e3c2e0632b58448040d9eca2e562ec6a9d4337277eb06b9d192e0ba698df62ae3eacadd19304695a2d8b77ea0948a4b9b041ac47
-
SSDEEP
3072:wxqZWhBa2UroC5LiCJ8uewC9AhDXxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOC:eqZ95WCKRAh
Malware Config
Extracted
redline
11111111111111111111
82.115.223.15:15486
-
auth_value
9cab54a5eaf86c0ca6773229cbd4274e
Signatures
-
Redline family
Files
-
86567a3c9dfa029ea1a409784c1c5c7decdbe4f0968d391d0b500aae176dbb12.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ