Behavioral task
behavioral1
Sample
0x00070000000126e0-1061.exe
Resource
win7-20230220-en
General
-
Target
0x00070000000126e0-1061.dat
-
Size
175KB
-
MD5
20b85f65118caeeeb3474fa2891ca940
-
SHA1
89db9b824bed7110ab13031dfbe15d2559ae408a
-
SHA256
4bc532445a3e79e063fe5b9d1afc049899af28509f0786fc6805aa8dc8f29718
-
SHA512
d46dc204d8ae204b6da534b4d976a25652d3ae1940d54b1ef4062d26a01a9b8ea677fbf3f587d13b658e8cb8fd6efef0fc1895fcd4d40fa60503d3ef3dd9f706
-
SSDEEP
3072:kxqZWZRanU2n0YLxE3I4Ge/N9PhhPxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jr:6qZgYLx+r5Ph
Malware Config
Extracted
redline
luza
176.113.115.145:4125
-
auth_value
1261701914d508e02e8b4f25d38bc7f9
Signatures
-
Redline family
Files
-
0x00070000000126e0-1061.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ