General
-
Target
main_payload
-
Size
91KB
-
MD5
12121087c44ec978e459a67d455b6c85
-
SHA1
650b829e69ce0b42a18e359c39f2851fac0897be
-
SHA256
61a70a257eccedad8dcf5ad6d8a9fa2704daad8bcd1e1e697422d643cb491bad
-
SHA512
973063be8d2d7badcd6461232ae49fb5f5de262f6f6865feeb05aa6bbf43ddb40b194a00c59ed2e3b9bbcb6599a35a06bb37fc7aa3426c941c8b1540e4b5e542
-
SSDEEP
1536:AWpenaW11csJz0L/QEU4WcILxdtylKdNHtO8LnbrUMKGMc/A/IzKVqk/6xI/ouw7:53jsJz0LIEU4WcILg8LbZnMc/QIzKVqb
Malware Config
Extracted
redline
5215764189_99
myodissey.top:28786
greengard.top:28786
-
auth_value
cbf62b4e40b11d106a44b4ab3996702b
Signatures
-
Redline family
Files
-
main_payload.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ