Overview

overview

10

Static

static

10

7e0528c468...12.exe

windows7_x64

10

7e0528c468...12.exe

windows10_x64

10

Analysis

  • max time kernel
    153s
  • max time network
    157s
  • platform
    windows7_x64
  • resource
    win7v20210408
  • submitted
    24-08-2021 15:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7e0528c468de5e4a4724bbc03c388912.exe

  • Size

    100KB

  • MD5

    7e0528c468de5e4a4724bbc03c388912

  • SHA1

    ccbf81d5aeeb03dbdb49a37c5e33bc1e8e287de2

  • SHA256

    f3bd165982995400b2f861021e54b7b17f58fac7bf031e27a7edc34b8be0a936

  • SHA512

    75844dd619518c4f397c9093beb3cca3e5064082ad5732c17a6b84cd94b6ab3d182f1f78cedb3917aea1269e9d530ebeecce7f96af380b549b6a7279b7f5a3cd

Score
10/10
redlineinfostealer

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7e0528c468de5e4a4724bbc03c388912.exe
    "C:\Users\Admin\AppData\Local\Temp\7e0528c468de5e4a4724bbc03c388912.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/280-60-0x0000000000CF0000-0x0000000000CF1000-memory.dmp
    Filesize

    4KB

    Download
  • memory/280-62-0x0000000004D80000-0x0000000004D81000-memory.dmp
    Filesize

    4KB

    Download