Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
03-06-2024 10:03
Behavioral task
behavioral1
Sample
RedEye.exe
Resource
win7-20240419-en
General
-
Target
RedEye.exe
-
Size
7.4MB
-
MD5
9a778b1341dbacea5e295f8de25c1eb3
-
SHA1
92536fb816b8c3e7217632ed8c9ec1594464aeac
-
SHA256
e269399ad2902c04aa5b71689f94320076e7fbd6925215cf9617023efba21d7f
-
SHA512
90b804f0a9986cff4c67afe8fa7795c92c0ff6ba00b04b92ae5ffce2e92b44257609f2ad34e3fc89a9d6b60fe0d8c52bd1e5971d14428af2b4762f775b7fe174
-
SSDEEP
196608:UrppYS6POshoKMuIkhVastRL5Di3uh1D7J+:SYS6OshouIkPftRL54YRJ+
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
Processes:
RedEye.exepid process 2968 RedEye.exe -
Processes:
resource yara_rule C:\Users\Admin\AppData\Local\Temp\_MEI22482\python311.dll upx -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
RedEye.exedescription pid process target process PID 2248 wrote to memory of 2968 2248 RedEye.exe RedEye.exe PID 2248 wrote to memory of 2968 2248 RedEye.exe RedEye.exe PID 2248 wrote to memory of 2968 2248 RedEye.exe RedEye.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\_MEI22482\python311.dllFilesize
1.6MB
MD55f6fd64ec2d7d73ae49c34dd12cedb23
SHA1c6e0385a868f3153a6e8879527749db52dce4125
SHA256ff9f102264d1944fbfae2ba70e7a71435f51a3e8c677fd970b621c4c9ea71967
SHA512c4be2d042c6e4d22e46eacfd550f61b8f55814bfe41d216a4df48382247df70bc63151068513855aa78f9b3d2f10ba6a824312948324c92de6dd0f6af414e8ab
-
memory/2968-23-0x000007FEF6110000-0x000007FEF66F9000-memory.dmpFilesize
5.9MB