Analysis
- max time kernel
147s - max time network
151s - platform
windows10_x64 - resource
win10-en-20210920 - submitted
03/10/2021, 16:31
General
- Target 2610fc741ea6b3925dc01789ba0e6d07.exe
- Size 390KB
- Sample211003-t1c9eafeb7
- SHA256 1d3f5be570caca4c2efbfee7e7e08d81704e0a40fa19b1df5b0c8a1baeaa6b21
Malware Config
Extracted
-
redline
-
PUB
-
45.9.20.20:13441
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2610fc741ea6b3925dc01789ba0e6d07.exe"C:\Users\Admin\AppData\Local\Temp\2610fc741ea6b3925dc01789ba0e6d07.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2352-115-0x0000000002420000-0x000000000243F000-memory.dmp
memory/2352-116-0x0000000004D80000-0x0000000004D81000-memory.dmp
memory/2352-117-0x0000000002680000-0x000000000269E000-memory.dmp
memory/2352-118-0x0000000005280000-0x0000000005281000-memory.dmp
memory/2352-120-0x0000000000400000-0x000000000046E000-memory.dmp
memory/2352-119-0x00000000001C0000-0x00000000001F0000-memory.dmp
memory/2352-122-0x0000000004D72000-0x0000000004D73000-memory.dmp
memory/2352-121-0x0000000004D70000-0x0000000004D71000-memory.dmp
memory/2352-123-0x0000000004D73000-0x0000000004D74000-memory.dmp
memory/2352-124-0x0000000002830000-0x0000000002831000-memory.dmp
memory/2352-125-0x0000000004BD0000-0x0000000004BD1000-memory.dmp
memory/2352-126-0x0000000004CE0000-0x0000000004CE1000-memory.dmp
memory/2352-127-0x0000000005890000-0x0000000005891000-memory.dmp
memory/2352-128-0x0000000004D74000-0x0000000004D76000-memory.dmp