Behavioral task
behavioral1
Sample
1744-2300-0x00000000011C0000-0x00000000011F0000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1744-2300-0x00000000011C0000-0x00000000011F0000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1744-2300-0x00000000011C0000-0x00000000011F0000-memory.dmp
-
Size
192KB
-
MD5
327ce5d1dd5d581576a7477c864c6690
-
SHA1
7380663b3504bc281a40da6e0a083581733f8f4a
-
SHA256
b252f5ed50d38168db4094e071534111aa7ddefcac14893f095987d30fc07ced
-
SHA512
f392baaf7736ca539bb5bf3d442a8894a4cba3bf65ddb553d446eee3f6a382864950224e4527ccf1b9502108eaf73224de5a927f8418a1ea90bcff27ef000c5b
-
SSDEEP
1536:sxwbf4Hr2yqlVZRGWJqFrd/twAjq1d+jh9LY1TGqVEbu7zz401B83wYkL8e8hI:sSbfC2RS/KSMdY15qVcQz4SBt8e8hI
Malware Config
Extracted
redline
diro
185.161.248.90:4125
-
auth_value
ae95bda0dd2e95169886a3a68138568b
Signatures
-
Redline family
Files
-
1744-2300-0x00000000011C0000-0x00000000011F0000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ