Analysis
- max time kernel
124s - max time network
121s - platform
windows10_x64 - resource
win10-en-20210920 - submitted
13/10/2021, 09:32
General
- Target acdf15a17b8b11a95ba85bfd088f67ed.exe
- Size 447KB
- Sample211013-lhmfcsdhb8
- SHA256 957818fe99ed9cbbbd5c7a1da5af7fe3db3f7623e19ab47c932076df855eb0c1
Malware Config
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\acdf15a17b8b11a95ba85bfd088f67ed.exe"C:\Users\Admin\AppData\Local\Temp\acdf15a17b8b11a95ba85bfd088f67ed.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/392-115-0x0000000001976000-0x00000000019A8000-memory.dmp
memory/392-116-0x0000000001870000-0x00000000018B0000-memory.dmp
memory/392-117-0x0000000000400000-0x00000000016E2000-memory.dmp
memory/392-118-0x00000000036B0000-0x00000000036EF000-memory.dmp
memory/392-119-0x0000000005EA0000-0x0000000005EA1000-memory.dmp
memory/392-121-0x0000000003922000-0x0000000003923000-memory.dmp
memory/392-120-0x0000000003920000-0x0000000003921000-memory.dmp
memory/392-122-0x0000000003923000-0x0000000003924000-memory.dmp
memory/392-123-0x0000000003860000-0x000000000389E000-memory.dmp
memory/392-124-0x00000000063A0000-0x00000000063A1000-memory.dmp
memory/392-125-0x0000000003924000-0x0000000003926000-memory.dmp