Behavioral task
behavioral1
Sample
1112-55-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1112-55-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1112-55-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
348b245f9d06bc481368e8ce20be1ed5
-
SHA1
698710f0ece14d26dfa0687d54c9b5db350e3602
-
SHA256
8ba10df7a18d500b7ebe043f033c63950b309bcf9e5c3e73e680c6658c02ab6c
-
SHA512
6c8a25b685e1223d864f239788d4f48dfbbe53867a5ff1acb35f848f6f4e6f7f019d7e53bb6cbf553d4a7c657d089e9ff03b074d4d4a70da55c561afd2f1a40a
-
SSDEEP
3072:wqalm74qpXtmOnJjBawT253uaxfKfVvXgDOL3D3pPL0F0JCb3O3Cb3hr+rUEcC8c:csfZM3jh
Malware Config
Extracted
redline
83.217.11.28:30827
-
auth_value
6ae56e1e5992d446c979c837ad9696f5
Signatures
-
Redline family
Files
-
1112-55-0x0000000000400000-0x0000000000430000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ