Behavioral task
behavioral1
Sample
0x000600000002313e-1199.exe
Resource
win7-20230220-en
General
-
Target
0x000600000002313e-1199.dat
-
Size
175KB
-
MD5
2c0a4f14ba61d1ecc9c39eaa316ec96c
-
SHA1
eb8be67ed1020848df3baee81ca54e23e942fe26
-
SHA256
e118e078b05733f62350ddc5a08e844bda534e12f70edc545b82cd90a5edb3d2
-
SHA512
cf7a660e522f365cf1884f94b2da5763b5d6757f8dc06387033e567dd951cb27e87eb798d3e3b4cff0e05535df246f01f92adf3ae9c152a31e103495017b4d3a
-
SSDEEP
3072:yxqZWDfnaxIF63WUX+BJe5bF+h3HxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOh:gqZcmWkUM+h
Malware Config
Extracted
redline
fomich
melevv.eu:4162
-
auth_value
b018e52ac946001794d8b8c23e901859
Signatures
-
Redline family
Files
-
0x000600000002313e-1199.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ