Analysis
-
max time kernel
13s -
max time network
149s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
08-04-2021 07:06
Static task
static1
Behavioral task
behavioral1
Sample
E4B9EABED5C9379746E079454788C0E5.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
E4B9EABED5C9379746E079454788C0E5.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
E4B9EABED5C9379746E079454788C0E5.exe
-
Size
128KB
-
MD5
e4b9eabed5c9379746e079454788c0e5
-
SHA1
f4b1b2ca30865a0e86a6e2ddf6de4f9bcfcfb057
-
SHA256
17c12556d3a9b99d40a6f974ead1f46817c2cd55f91aae87bd564383b6b32382
-
SHA512
190b161bb45b05ea625671aeaabf0521234671bfe73afcd5969e373dd8847ce8c35a2786bcfeb87f8035246a8a25f340f9f37060ecbd509fb3c36b772868119c
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
E4B9EABED5C9379746E079454788C0E5.exedescription pid process Token: SeDebugPrivilege 1656 E4B9EABED5C9379746E079454788C0E5.exe