Analysis
-
max time kernel
76s -
max time network
142s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
19-03-2021 07:41
General
-
Target
0adaabe4a156ee49011937d128b7bfec.exe
-
Size
286KB
-
MD5
0adaabe4a156ee49011937d128b7bfec
-
SHA1
bb2bbf24fd2cdbe86f16c1bf08563886b73170bb
-
SHA256
7eefafe85ed6277d9c6abd81fa1ef7969c2ce6767c609baafc79206f78d13685
-
SHA512
eb5d1a6f2cfbf4d3b6d1a2b3aaf80ecb020b8acd3175a9bdea61b23e9d11555466133e4bd685a8c566c3e3576e0b28536636c3f848cf1dd0987ccd700b3140d7
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0adaabe4a156ee49011937d128b7bfec.exe"C:\Users\Admin\AppData\Local\Temp\0adaabe4a156ee49011937d128b7bfec.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
160KB
-
Filesize
212KB
-
Filesize
4KB
-
Filesize
224KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
156KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB