Behavioral task
behavioral1
Sample
2444-137-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2444-137-0x0000000000400000-0x000000000045A000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
2444-137-0x0000000000400000-0x000000000045A000-memory.dmp
-
Size
360KB
-
MD5
9ea38dcee7623accfecc16825cb1fdf2
-
SHA1
d236e28d1799a978ffb94d7913f54e712ba63407
-
SHA256
af406d110896f117eb66fa9a54a345d2e117703caa2afaa3f5732e551b87c7d6
-
SHA512
8b6fb1fe6736a10e0f7c9efd1bbb221f8ff39520a1873030566268e2cefdcd55e70051aa5368bfbd4a69a7fae5aa2e808d61dfa668b7f24be6ad68cafac22e4d
-
SSDEEP
6144:lDUGfB4zzMd/WcSDtn//jPDYp2yHbLizJoz7IgSY/XGHCCKaVKj:l3BKUyG4yHbLizJoz7IgSY/XGHCCKaVc
Malware Config
Extracted
redline
16.03
94.130.181.125:37659
-
auth_value
a68df9483a2a8624b7759913afa07267
Signatures
-
Redline family
Files
-
2444-137-0x0000000000400000-0x000000000045A000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ