Behavioral task
behavioral1
Sample
d8b7c66dc249b6b4d5b8c5f35a1b4918b291b522d141fbc8b99e35a089722440.exe
Resource
win10v2004-20230221-en
General
-
Target
d8b7c66dc249b6b4d5b8c5f35a1b4918b291b522d141fbc8b99e35a089722440
-
Size
410KB
-
MD5
80442ce57f8181f85560dc1b3e77bba6
-
SHA1
2d47ff5f39299aa10c96080c6424a9f6bfd57282
-
SHA256
d8b7c66dc249b6b4d5b8c5f35a1b4918b291b522d141fbc8b99e35a089722440
-
SHA512
acbae2c14517619d0b136583ba8003a8173c00d490cae5958c2de1bbde96ad18b2a2fd2f29de1f4cbe5516185e106acf01709255695f66e8a9cd65a15716a8c1
-
SSDEEP
3072:EPv9y05x672rrrrrrrrrrrrrrrrrrrrrrr3rrrrrrrrrrrrrrrrrrrrrrrdr4utO:EFXf6CS1gCrYY7YY7YY7YYLnnn
Malware Config
Extracted
redline
Build987654321
45.15.156.202:21286
-
auth_value
26d6f5ac13f1908fb3ee47ba1a2a3368
Signatures
-
Redline family
Files
-
d8b7c66dc249b6b4d5b8c5f35a1b4918b291b522d141fbc8b99e35a089722440.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ