Behavioral task
behavioral1
Sample
7BC4EE2F35850D4B1FED83E85CDBAABBADBC78F968AE9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7BC4EE2F35850D4B1FED83E85CDBAABBADBC78F968AE9.exe
Resource
win10v2004-20220901-en
General
-
Target
7BC4EE2F35850D4B1FED83E85CDBAABBADBC78F968AE9.exe
-
Size
287KB
-
MD5
dca4f64b139b79aa44061484c554e0dd
-
SHA1
11b24de843f6d71651e07f25b43a6197a25bc1c7
-
SHA256
7bc4ee2f35850d4b1fed83e85cdbaabbadbc78f968ae9de0f66a122a5c18db0e
-
SHA512
2767e7fcb6a6fd75b178c590dff90b2a99e443823ceec3237f0c828de6ae02a248e551a511c543c565309b53cebcb14d251dcf13e61c31ed1ca431ca9e35a1bf
-
SSDEEP
6144:ZdnIiXbMcGC8bP5CfIq2jF15J+oLmw+3SUH:TTLNGC8bPkAPfTFL9+C
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
Files
-
7BC4EE2F35850D4B1FED83E85CDBAABBADBC78F968AE9.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ