Behavioral task
behavioral1
Sample
2100-239-0x0000000000180000-0x00000000001B6000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2100-239-0x0000000000180000-0x00000000001B6000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
2100-239-0x0000000000180000-0x00000000001B6000-memory.dmp
-
Size
216KB
-
MD5
31100122c27199b71bdb8251e93b1264
-
SHA1
0e73c1543e610d43eae43fd2604654474246a920
-
SHA256
02900216e12d1a67897ec01c3dd2a80c45e8819e345732b1f0994a8ebc77eb90
-
SHA512
b44433286ccfb37aabdddc1959d9b767c26e321b81b9e7387232683396a8e51d5045c6fac729e406e81be3381312bda69ddaec12a6cae69e8e2b509ce66147c2
-
SSDEEP
1536:dIgopV6IqlVZRGWqGnJ/rL+9m1j1l7FfRTGqVEbuwY+lwk92mBY83wYkMRBWG:dIgoD6kGnV/+qVcpn2k92mBYcBWG
Malware Config
Extracted
redline
1379752987
167.235.158.92:13190
-
auth_value
94039ae8b5b0b9ec5346501cc0139461
Signatures
-
Redline family
Files
-
2100-239-0x0000000000180000-0x00000000001B6000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ