Behavioral task
behavioral1
Sample
67e4938a6cdfa210430f4679fa1d0fdf1ed1f377299767152dc3e2b3fee9c29f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
67e4938a6cdfa210430f4679fa1d0fdf1ed1f377299767152dc3e2b3fee9c29f.exe
Resource
win10-20220901-en
General
-
Target
67e4938a6cdfa210430f4679fa1d0fdf1ed1f377299767152dc3e2b3fee9c29f
-
Size
175KB
-
MD5
f12b5891e4535d31d5244804eec017bd
-
SHA1
8b94ee3093f86200b36bf095e5de5819d63597b9
-
SHA256
67e4938a6cdfa210430f4679fa1d0fdf1ed1f377299767152dc3e2b3fee9c29f
-
SHA512
90fee63f990a2cea562c2029619017ce2bf48d1bc0693f1bbc5a3c65cd372a9b9d49b154bbd856dc67274c1e7587bcb8a29b208f673fb8c314a3fa1cc5bdda06
-
SSDEEP
3072:nxqZWZxamUaY3WVJHsXeTdFyh8vxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOur:xqZZWVJMayh
Malware Config
Extracted
redline
122e3232323gr
82.115.223.15:15486
-
auth_value
de236892a297e6d627d8c1015305b830
Signatures
-
Redline family
Files
-
67e4938a6cdfa210430f4679fa1d0fdf1ed1f377299767152dc3e2b3fee9c29f.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ