Behavioral task
behavioral1
Sample
2336-3-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2336-3-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win10v2004-20230915-en
General
-
Target
2336-3-0x0000000000400000-0x0000000000430000-memory.dmp
-
Size
192KB
-
MD5
005be24ccca38bb322bba62c70594189
-
SHA1
661989ba2b1dcb0386c8a662b93b96ca35ee59af
-
SHA256
837485f4834507ab1d1dd506118a490dad908e51344ff4094fa6cab5db6de137
-
SHA512
8841907cf0a8cad610f9e5f50ac22eab93fd0e8f8db8c57964c3aa02d8a68e3070d43ffc1a248f2f76b67d8289e0062986023b3c59396399db9c82802b1143fe
-
SSDEEP
3072:a8a4JMUyI0i9ykuOMx/V8GztHteE0KHt67/tJB8e8hO:a8amyI0i9ykqztHteE0d7/tn
Malware Config
Extracted
redline
@Black_Santa21
94.142.138.4:80
-
auth_value
5a06838de858adf9064d7d2c59f0d1f6
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2336-3-0x0000000000400000-0x0000000000430000-memory.dmp
Files
-
2336-3-0x0000000000400000-0x0000000000430000-memory.dmp.exe windows:4 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ