redline | 840b613e2b9d25d067a9afdf289248fc[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

840b613e2b9d25d067a9afdf289248fc.exe
Size

2.8MB
MD5

840b613e2b9d25d067a9afdf289248fc
SHA1

26008537f728b9c09d07b8cec97ebe87faedf2da
SHA256

f99fd8f53b8024ba0785d3a4af84f2dc0f95c75ebe5a87e55c43e88c81fdfe6c
SHA512

80e4c5fae8305b75bdd59078532017d0d1db6e4332fcf2dc17674abe978f5ee965de77c3d2b0b73e118974ba2f2926a4af87870d09efc726fc59395462a86e7c
SSDEEP

49152:qMcwctc47V4ruEIfnrzaxBhWl+aXAczlk2J3Y2pQt:eZRVwuEIfnacU3x2Jo2S

Score

10^/10

redline

Malware Config

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

840b613e2b9d25d067a9afdf289248fc.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ