Behavioral task
behavioral1
Sample
0x00070000000126ed-121.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0x00070000000126ed-121.exe
Resource
win10v2004-20230220-en
General
-
Target
0x00070000000126ed-121.dat
-
Size
145KB
-
MD5
7fa5124aba108bd1deff7e792a7c709c
-
SHA1
a24cde54dbea3fcb091d21b2606bed41ea104909
-
SHA256
1314bc8533010fb139f9bd9f9b84252072242c9fdbadf4edefddc4804bfde065
-
SHA512
aeba3b1a604c089a85a07d4c21174445066ffaceeefe1890432204e6959d198a1a3e279eaeb11bb68c7a06ea489e6768cf1f46a7557fb619e0ffd789c301cf49
-
SSDEEP
3072:FV+m5c/QmRSNAwMqLza9nDEFth2ZG8e8hR:Fj2FD0IQth2c
Malware Config
Extracted
redline
luna
77.91.68.253:4138
-
auth_value
16dec8addb01db1c11c59667022ef7a2
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0x00070000000126ed-121.dat
Files
-
0x00070000000126ed-121.dat.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ