Behavioral task
behavioral1
Sample
2260-83-0x00000000001E0000-0x0000000000210000-memory.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2260-83-0x00000000001E0000-0x0000000000210000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
2260-83-0x00000000001E0000-0x0000000000210000-memory.dmp
-
Size
192KB
-
MD5
8df18120d6127a463330f2533439ed12
-
SHA1
119a9d4d4afe2a8d23e198d8cf3ff9ffe80fc15b
-
SHA256
46654196d575ccd479c9ad2b718493719e4aaf991c5a46fd9bdef8fb098f5997
-
SHA512
d5369c3c7c134b657c5ab3ee0bdbbf29722d8f2a6a3e68e4843eada9c10b2ae668f73a8df4b2bf8d7cab47415f9b2e5b5950621a9a531acd67a0ee7d52a48b5e
-
SSDEEP
3072:PN9zgaHeuGhriktrBxN3kuZ+zdz78e8hj:l9Ie4rhTodz7
Malware Config
Extracted
redline
furod
77.91.68.70:19073
-
auth_value
d2386245fe11799b28b4521492a5879d
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2260-83-0x00000000001E0000-0x0000000000210000-memory.dmp
Files
-
2260-83-0x00000000001E0000-0x0000000000210000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ