Analysis
- max time kernel
122s - max time network
120s - platform
windows7_x64 - resource
win7-en-20210920 - submitted
13/10/2021, 09:32
General
- Target acdf15a17b8b11a95ba85bfd088f67ed.exe
- Size 447KB
- Sample211013-lhmfcsdhb8
- SHA256 957818fe99ed9cbbbd5c7a1da5af7fe3db3f7623e19ab47c932076df855eb0c1
Score
10/10
Malware Config
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\acdf15a17b8b11a95ba85bfd088f67ed.exe"C:\Users\Admin\AppData\Local\Temp\acdf15a17b8b11a95ba85bfd088f67ed.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2008-54-0x000000000178B000-0x00000000017BE000-memory.dmp
memory/2008-55-0x00000000002B0000-0x00000000002F0000-memory.dmp
memory/2008-56-0x0000000000400000-0x00000000016E2000-memory.dmp
memory/2008-57-0x00000000034E0000-0x000000000351F000-memory.dmp
memory/2008-58-0x0000000003520000-0x000000000355E000-memory.dmp
memory/2008-59-0x0000000003441000-0x0000000003442000-memory.dmp
memory/2008-60-0x0000000003442000-0x0000000003443000-memory.dmp
memory/2008-61-0x0000000003443000-0x0000000003444000-memory.dmp
memory/2008-62-0x0000000003444000-0x0000000003446000-memory.dmp