Behavioral task
behavioral1
Sample
7ee6c618a74374d5cdf78a6b81dd5059c55ca6f833ebac7e09e77c04044d6dbf.exe
Resource
win7-20221111-en
General
-
Target
7ee6c618a74374d5cdf78a6b81dd5059c55ca6f833ebac7e09e77c04044d6dbf
-
Size
175KB
-
MD5
f239cff5718692c4fb4ccb73037269c2
-
SHA1
77ed548dff68401536b7f8fb829b27edce429c1c
-
SHA256
7ee6c618a74374d5cdf78a6b81dd5059c55ca6f833ebac7e09e77c04044d6dbf
-
SHA512
7c1b4aa9a3be9ce26f4a1dd8b56b13aa9b74dc838b83e5d26b1edb932ca7cc698328e0a8798f2842cc09f5a59e2581671431074f2650ddc149470b3270ab2caa
-
SSDEEP
3072:8xqZWFFa7E6T8rRyeiBQeEeFthnfxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOE:SqZcrgN1th
Malware Config
Extracted
redline
logs1
111.90.143.162:44423
-
auth_value
b02343711938782fa3a9dc9acc819e15
Signatures
-
Redline family
Files
-
7ee6c618a74374d5cdf78a6b81dd5059c55ca6f833ebac7e09e77c04044d6dbf.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ