Behavioral task
behavioral1
Sample
0x00070000000132f5-1061.exe
Resource
win7-20230220-en
General
-
Target
0x00070000000132f5-1061.dat
-
Size
175KB
-
MD5
5f4e34c685349832c8341ce15dd3265b
-
SHA1
4e5089ad737c44183841cec4906fc2fb1b71cac8
-
SHA256
b750afd88ec8de8916977a38e9012d5e49b60a8529838cf03accbd34d7089cc1
-
SHA512
0eb28e87c59c2ce18fad854a243f69281c7d78ef39f9c1db6ef539186ebe932e0aa0746725bdfe427ab935f426dfcfa3c9af05543636e932927ba5f9f3550733
-
SSDEEP
3072:ZxqZWjfa8oty3s5vZllel5Fih1vxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOus:LqZC0hMih
Malware Config
Extracted
redline
braza
193.233.20.32:4125
-
auth_value
ebe61b54deeef75cf8466416c0857088
Signatures
-
Redline family
Files
-
0x00070000000132f5-1061.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ