Behavioral task
behavioral1
Sample
a82830c913f8e7f5fd2e70c200299c4e.exe
Resource
win7-20220812-en
General
-
Target
a82830c913f8e7f5fd2e70c200299c4e.exe
-
Size
169KB
-
MD5
a82830c913f8e7f5fd2e70c200299c4e
-
SHA1
2025562f2292fefe69481160b2ef7add245afda6
-
SHA256
7df59e06eb1d2669ea952b9ad3c31d95ef142999627aea7f36e4ac2a198136ad
-
SHA512
776dbee7fda077ae9efff7e04d8f359510d825228bb0d989b6c9f35432ed96ed5ec3c5097a7e82a6b290173995ed3a98b5bff48dbb9448ae2dcaecfe69ca59f3
-
SSDEEP
3072:iph2fpqsz0Fv/L482Kz6lJePHhHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOu8:ipRsi4vKml8Hh
Malware Config
Extracted
redline
2023
94.131.97.236:21658
-
auth_value
cf6866754aa7ec5e7d0e7fcbd55ba3fd
Signatures
-
Redline family
Files
-
a82830c913f8e7f5fd2e70c200299c4e.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ