Behavioral task
behavioral1
Sample
0x00080000000122d1-1062.exe
Resource
win7-20230220-en
General
-
Target
0x00080000000122d1-1062.dat
-
Size
175KB
-
MD5
69372dbe05c4248d2e8e3d66b8a56298
-
SHA1
94f907649aa0fe7f9c06347b9c7737e5c2ccd135
-
SHA256
a495511f0a87529d65c9dcb1431d97c7f672a695a45a96c9b3bfad96b4752830
-
SHA512
b7e36f7005e035b0170b1fec93bf4b501122e457cda649bb13053c97d45525a28c7a2b5a96996288e65b3f6fa30a428e31342e7f73cf4c313e6947e04773c3ff
-
SSDEEP
3072:ZxqZWjfa8oty3s5vZllel5Fih1vxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOus:LqZC0hMih
Malware Config
Extracted
redline
braza
193.233.20.32:4125
-
auth_value
ebe61b54deeef75cf8466416c0857088
Signatures
-
Redline family
Files
-
0x00080000000122d1-1062.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ