Behavioral task
behavioral1
Sample
832-63-0x0000000000400000-0x0000000000432000-memory.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
832-63-0x0000000000400000-0x0000000000432000-memory.exe
Resource
win10v2004-20221111-en
General
-
Target
832-63-0x0000000000400000-0x0000000000432000-memory.dmp
-
Size
200KB
-
MD5
1069854d375a6920f2aded4e1d0d7702
-
SHA1
23fc8c76ed04debecc9200de3b45822b61155bd9
-
SHA256
afe6beb5cf15d307fa07563fa83de9c74c22d3c0272acf34227a67d60299203c
-
SHA512
fa1767daab40ecbe3aeef953600454d3397335b4f62362cbcabc1ef3f0a84777f21f089c23900d2d0cf777f10a89aa0ddd94fd14ad13283e943e6fb8f1a0544e
-
SSDEEP
1536:5vZi55zWaQDfj9o9lqUCpARbsFcB+rSqHkU4pJbu3zV0YFgE0wuei+QnYcg:5xqZW1dagUNRbMnmqHkUkexdFgEhC
Malware Config
Extracted
redline
03.02.23
188.127.227.25:6714
-
auth_value
2cf638fe716dc2686fde58759ab8a963
Signatures
-
Redline family
Files
-
832-63-0x0000000000400000-0x0000000000432000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ