Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
General
-
Target
file.exe
-
Size
175KB
-
MD5
b8d2c95e7e0f9ee794156705c201d335
-
SHA1
39b9b0b0dcc1270a46602404c30a4dce7938d2fb
-
SHA256
d65d829acc865ec68308b69495d2ee5fd55ce8e810fde28ccf091b269bb4b31d
-
SHA512
c83f477a9b2812ac6a9d47dc62a0e1b535dcdff2c94387cdcb8e91bae7d83b11546ceaf8684642bd3aaedcf88add07d38c73dafd9442a2b7421f4587e2768f72
-
SSDEEP
3072:XxqZW1dagUNRbMTSPLUZeZ5FRhC/xNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOl:hqZmTSPoWRh
Malware Config
Extracted
redline
Chat GPT
108.165.242.55:38269
-
auth_value
8f81168dfcd4ad470a6a605603686c5f
Signatures
-
Redline family
Files
-
file.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ