Behavioral task
behavioral1
Sample
5be89599ac45c88bad9083afcc555874c94bd711a44c67e5d0aad0ab318188c2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
5be89599ac45c88bad9083afcc555874c94bd711a44c67e5d0aad0ab318188c2.exe
Resource
win10v2004-20240910-en
General
-
Target
5be89599ac45c88bad9083afcc555874c94bd711a44c67e5d0aad0ab318188c2.exe
-
Size
401KB
-
MD5
1e53aeaabcab0989b473e44f7ef02731
-
SHA1
85b2a41e8060a08eff4a1fc97e078229ee1e781d
-
SHA256
5be89599ac45c88bad9083afcc555874c94bd711a44c67e5d0aad0ab318188c2
-
SHA512
a74380c04dd5f49f13074a3d14be3bfd4b213c970604d70ed42591b4ba14841dd248a4c48adcc64ecf19ffdb4aa50285a05e3cfee4a20f1e3f159b8241a4a8bc
-
SSDEEP
6144:cCLCDJ0p8LXxb/cMnz19/Fx+qQDkgCxsmjDQnIKp+59Ff+++++h++EuFF++CvF:cIaK8LXt/cMnzHjbQ4vx7Qn4EmF
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5be89599ac45c88bad9083afcc555874c94bd711a44c67e5d0aad0ab318188c2.exe
Files
-
5be89599ac45c88bad9083afcc555874c94bd711a44c67e5d0aad0ab318188c2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 231KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ