Behavioral task
behavioral1
Sample
2K Launcher.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2K Launcher.exe
Resource
win10v2004-20220812-en
General
-
Target
4aa0197f132a504ef36f5a1c7975d909d3b1b56be7d67546c14d964a9d7ff204.zip
-
Size
224KB
-
MD5
6de6c83b69b94086a95d553f64d6ddba
-
SHA1
4e98abcbb1e09a1e5bca8dd899da86ccf116d126
-
SHA256
4aa0197f132a504ef36f5a1c7975d909d3b1b56be7d67546c14d964a9d7ff204
-
SHA512
e5efaaf9192ad7f1bc11165fdaba08909807ea31639019e2479b5d0e8cc855e13631ea07bed1290bc062630714ebc10dde50e62ac29826521e93dc7815b100b8
-
SSDEEP
3072:1GYWKSTQ0SfmL6ee2I0Em13TcYeprLET++Pfnd0cihxWJJq2euJfn:1wKn0SuL6h2I0dCvEvPPd0cfJHeuJfn
Malware Config
Extracted
redline
2K Games
103.195.100.184:25359
-
auth_value
1f70b4e1f9efe97d5827888ae71d85d5
Signatures
-
RedLine payload 1 IoCs
resource yara_rule static1/unpack001/2K Launcher.exe family_redline -
Redline family
Files
-
4aa0197f132a504ef36f5a1c7975d909d3b1b56be7d67546c14d964a9d7ff204.zip.rar
-
2K Launcher.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ