Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
14-10-2021 05:12
General
-
Target
6cde7f00ae4a0ebeb1fc50a4a10d8416a998fe6beef3efe577c06c95f166a610.exe
-
Size
380KB
-
MD5
c4342fccec581e8098729f65201ee3fc
-
SHA1
8bf8e6f4b2ad366c118f406e6e9783257debb8cf
-
SHA256
6cde7f00ae4a0ebeb1fc50a4a10d8416a998fe6beef3efe577c06c95f166a610
-
SHA512
5e3401cbae6357ade65a95f99d09d211c28e72bfdfde72a94a594c4ede1c157dbe6dad38b7701448d41fc0eddf2eeeacb9890ac87dd4cda81b356fe7b5f257a1
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6cde7f00ae4a0ebeb1fc50a4a10d8416a998fe6beef3efe577c06c95f166a610.exe"C:\Users\Admin\AppData\Local\Temp\6cde7f00ae4a0ebeb1fc50a4a10d8416a998fe6beef3efe577c06c95f166a610.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3472-115-0x00000000008B1000-0x00000000008E4000-memory.dmpFilesize
204KB
-
memory/3472-116-0x00000000023C0000-0x00000000023FF000-memory.dmpFilesize
252KB
-
memory/3472-117-0x0000000004D40000-0x0000000004D41000-memory.dmpFilesize
4KB
-
memory/3472-118-0x0000000004BC0000-0x0000000004BFE000-memory.dmpFilesize
248KB
-
memory/3472-120-0x0000000000400000-0x00000000004D1000-memory.dmpFilesize
836KB
-
memory/3472-121-0x0000000004D30000-0x0000000004D31000-memory.dmpFilesize
4KB
-
memory/3472-119-0x00000000004E0000-0x000000000062A000-memory.dmpFilesize
1.3MB
-
memory/3472-122-0x0000000004D32000-0x0000000004D33000-memory.dmpFilesize
4KB
-
memory/3472-123-0x0000000004D33000-0x0000000004D34000-memory.dmpFilesize
4KB
-
memory/3472-124-0x0000000004D34000-0x0000000004D36000-memory.dmpFilesize
8KB
-
memory/3472-125-0x0000000004C00000-0x0000000004C01000-memory.dmpFilesize
4KB