Behavioral task
behavioral1
Sample
0x0007000000013392-2300.exe
Resource
win7-20230220-en
General
-
Target
0x0007000000013392-2300.dat
-
Size
168KB
-
MD5
22a115abfff8764a533fc9272942274c
-
SHA1
7b4448598cd36f0586c4f388b29c4b14ae49b8ed
-
SHA256
4cdb607c3e0f77a42158547e598b53a45b7877ea1f4e58ce7831257731dd9d74
-
SHA512
284bb94a4e1f3a9fc469889e09bcd02c034b646a62e58eaddb9cbf5b3a190bd64a6f8599b4f6b35dc0978eb6c609151d3e4779c16b24a9672ef86714f4865376
-
SSDEEP
1536:yiwRHYqlVZRGW6zgHr4Y4JxMGztAxzbTGqV+buUngUtWfD5383wYkF8e8hP:WJIHlbWMqVKIdD53X8e8hP
Malware Config
Extracted
redline
diza
185.161.248.150:4128
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Signatures
-
Redline family
Files
-
0x0007000000013392-2300.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ