Behavioral task
behavioral1
Sample
6b24fcbb425e8840c3e026cf04e82a31908dbb8479df3946955c18f8d35dc965.exe
Resource
win7-20221111-en
General
-
Target
6b24fcbb425e8840c3e026cf04e82a31908dbb8479df3946955c18f8d35dc965
-
Size
50KB
-
MD5
9c0ff41bf196043550ebbc02608403b5
-
SHA1
ae0a1f87b9bf407cb7c427ffb551f21ed351dea0
-
SHA256
ce06c98ee84b25c64790c6a1f889f27f827125a5d37991ea0a013aff86810f99
-
SHA512
a5c955b54e25c036fbe18ff9050e511a14b4c5a2c4ddc5dad76bc49a746e26b1b4248aa123ed62a19b3521ff951c02729db2a2ae329c5f471e7a144a0b64ad83
-
SSDEEP
1536:WsSWYC5tGlhKZfu90i9twQwSyFX76pJAHq/DM+Q:WN1C3Gvuuyi2SyOAHq/on
Malware Config
Extracted
redline
77777
82.115.223.15:15486
-
auth_value
3002c51b1f63c3cc9e8c7a191c399c7b
Signatures
-
Redline family
Files
-
6b24fcbb425e8840c3e026cf04e82a31908dbb8479df3946955c18f8d35dc965.zip
-
6b24fcbb425e8840c3e026cf04e82a31908dbb8479df3946955c18f8d35dc965.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ