Behavioral task
behavioral1
Sample
1716-55-0x0000000000400000-0x000000000042E000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1716-55-0x0000000000400000-0x000000000042E000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1716-55-0x0000000000400000-0x000000000042E000-memory.dmp
-
Size
184KB
-
MD5
aabfb990b94aa366fb6812e1a61909d4
-
SHA1
c8ad41de8fbd92d70692c7f60ce927b8e2d747d5
-
SHA256
3ef5c8196a05d747d7564f5a717bc2c0eaac9caa64baaca70efaa96595bcf1b5
-
SHA512
71a95f74fdb4a1dd9912fc0bd23715b73246c07c7c4d4c460b5821b0b856cb59927611243ed14f07b6a2947ffacf450e2e316df45e993bdc9e6403916134d52e
-
SSDEEP
1536:HmUb1iE+qlVZRGWc+ngrSWV3ww5A8InzvMTGqV8buQm1w6L0WPz83wYk88e8hZ:HHb1p4oG3buz9qV0OwW0WPzC8e8hZ
Malware Config
Extracted
redline
lux2
176.123.9.142:14845
-
auth_value
a190ebf01162a5f4150c75b51cfe6687
Signatures
-
Redline family
Files
-
1716-55-0x0000000000400000-0x000000000042E000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ