redline | Adobe Iauncher 2022 x64 by Acher 1[.]3[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Adobe Iauncher 2022 x64 by Acher 1.3.exe
Size

237KB
MD5

0fa226239aa824e4b39e39092cddc8e5
SHA1

5d2a77fc792ebb9d8d4f49f263b5080dbc503f8e
SHA256

1155511993e0476d8024c9eaff950c55deb65e463fe6c58495cda25702e54fe2
SHA512

03a825ffd491dc1e321061bf70fbb3b7171d5e876d919675e004f97632856f31cbca7f0f838a0ab6e4060381113a0efcd1290da38787b86ade5c7c9cb6afd091
SSDEEP

1536:TOfG+zC1sW0XD6bYqY/bYGgfj0P86c4eF6ZiXblg1sKy+CbRQLbuMZ0d1W00wue5:q9C1sW0XuUqYSl6G6UXblDPQmbW0hPt3

Score

10^/10

redline

Malware Config

Extracted

Family

redline

C2

62.204.41.141:24758

Attributes

auth_value
c516eae292e19b08ddfd191ea1c18eb4

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

Adobe Iauncher 2022 x64 by Acher 1.3.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ