Behavioral task
behavioral1
Sample
rk225280.exe
Resource
win7-20230220-en
General
-
Target
rk225280.exe
-
Size
169KB
-
MD5
0d41c2854179d7ce3787778cf834d479
-
SHA1
4d5516ece6a6d12e628dc78962cb8ee30b7300ae
-
SHA256
8246e8ede3469c1446afd2a0457fc3b0a233089b62a8f1a6748e0a4cd1719c2b
-
SHA512
50ec59f654cbaf303abd1d750113b471ec01df9bf4103dae8156669fa3624bf3eb89a68b2226bb7383db64fed3a4413ae953a1920ea8928fb073a723f766418c
-
SSDEEP
1536:txwbf4Hr2yqlVZRGWJqFrd/twAjq1d+jh9LY1TGqVEbu7zz401B83wYkq8e8hI:tSbfC2RS/KSMdY15qVcQz4SBk8e8hI
Malware Config
Extracted
redline
diro
185.161.248.90:4125
-
auth_value
ae95bda0dd2e95169886a3a68138568b
Signatures
-
Redline family
Files
-
rk225280.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ