Behavioral task
behavioral1
Sample
916-55-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
916-55-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win10v2004-20230221-en
General
-
Target
916-55-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
2b600cec41c6168b23aaaf1916af8ff1
-
SHA1
d26db7d840468195cfd8d9a86dfb85f2fa506823
-
SHA256
69ff1c845a2e4abc7a1a204c8569fed9675e32f54c0130fc5b33d244532565ab
-
SHA512
0922a1a1c2d28ef96007a2a8ce99cabf7941776bf44e12afffe3d86304a04d92566dc341a0e69fe9eb8ac0152c6b206e5a7f10acb924b0cebca0d747202709fe
-
SSDEEP
1536:LTFCqlVZRGW177rMc/G3uNZCpei0l/tCNTGqVabu/dMi+OpGlw83wYkY8e8hh:Lh9vo4wpl0jbqVOeMi+2Glwi8e8hh
Malware Config
Extracted
redline
999
176.124.212.210:33247
-
auth_value
fb7442e004b18e68ad1560acbed2e429
Signatures
-
Redline family
Files
-
916-55-0x0000000000400000-0x0000000000430000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ