Behavioral task
behavioral1
Sample
019b85d815c870e354e82a0aa1925b8740c7b65fa04516d27e189f32ef414758.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
019b85d815c870e354e82a0aa1925b8740c7b65fa04516d27e189f32ef414758.exe
Resource
win10v2004-20241007-en
General
-
Target
019b85d815c870e354e82a0aa1925b8740c7b65fa04516d27e189f32ef414758
-
Size
120KB
-
MD5
abb85f30c192838e70d1763a1a5667c1
-
SHA1
0ae4c802afcad01a40ad53a21f9f0c2efec48a2a
-
SHA256
019b85d815c870e354e82a0aa1925b8740c7b65fa04516d27e189f32ef414758
-
SHA512
45f71a81ca7d750259e6e3ab0f3caa73f844733473d9091e9bc7325b7e5f2d8872c32c5a8b1f1732eaa5fafb43bd0f09ac06f13846e76e36942a96025e673655
-
SSDEEP
1536:FqsIhaqpalbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed2RtmulgS6p:DGaKaYP+zi0ZbYe1g0ujyzd5
Malware Config
Signatures
-
RedLine payload 1 IoCs
resource yara_rule sample family_redline -
Redline family
-
SectopRAT payload 1 IoCs
resource yara_rule sample family_sectoprat -
Sectoprat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 019b85d815c870e354e82a0aa1925b8740c7b65fa04516d27e189f32ef414758
Files
-
019b85d815c870e354e82a0aa1925b8740c7b65fa04516d27e189f32ef414758.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ