file | Triage

Submit
Reports

Overview

overview

Static

static

1

file.exe

windows7-x64

file.exe

windows10-2004-x64

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

file.exe

Resource

win7-20220812-en

redline new discovery infostealer spyware stealer

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

file.exe

Resource

win10v2004-20220812-en

redline new discovery infostealer spyware stealer

windows10-2004-x64

8 signatures

150 seconds

General

Target

file
Size

894KB
MD5

f6f9f20c6d8deb6b59771153ba09ea6e
SHA1

b95a95a4a6bc28656c95c49f2df528c41cd0afa4
SHA256

0c7e767a14e8e18e4764fb71e0af2f50a556c7ec6f900ac486d656067835c2f9
SHA512

45edcbdb9a37d5dd0cd05b8e274b944c250f842bed5bbeb171b66e32269f62fc823c9380aa8abe82a100328d52fd51e252a378a3b150d5866227270053e9e548
SSDEEP

12288:3hJMAgttxlpdhVZNRqrLJS/3Am07Kyv2uqg9YXNreTl/0bvtp:3hzrLJSISyv2uqg9Yo/6p

Score

1^/10

Malware Config

Signatures

Files

file
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 780KB - Virtual size: 780KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2024

Terms | Privacy