Analysis
-
max time kernel
128s -
max time network
130s -
platform
windows10_x64 -
resource
win10v20210408 -
submitted
14-10-2021 05:13
General
-
Target
be7d16cefc8ea997352189dff9425572e853027acf013738e06644a843755e0b.exe
-
Size
379KB
-
MD5
39d792cdcee538f09e14e8a7f42474ec
-
SHA1
2a4f5ca25016d43f26c9be905f8eee50046b4ad8
-
SHA256
be7d16cefc8ea997352189dff9425572e853027acf013738e06644a843755e0b
-
SHA512
f37e7b8c15e95bf1ba98ca8df3f61b19a9ebde607b6e8efa1d01768f34d98c1bdd6d501358ddcff5547303a6973ba3d1c748a8e46af2862f628984a0c8746201
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\be7d16cefc8ea997352189dff9425572e853027acf013738e06644a843755e0b.exe"C:\Users\Admin\AppData\Local\Temp\be7d16cefc8ea997352189dff9425572e853027acf013738e06644a843755e0b.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/656-116-0x0000000000400000-0x00000000004D1000-memory.dmpFilesize
836KB
-
memory/656-115-0x00000000001C0000-0x0000000000200000-memory.dmpFilesize
256KB
-
memory/656-117-0x0000000004D80000-0x0000000004D81000-memory.dmpFilesize
4KB
-
memory/656-118-0x00000000025B0000-0x00000000025EF000-memory.dmpFilesize
252KB
-
memory/656-119-0x0000000004D90000-0x0000000004D91000-memory.dmpFilesize
4KB
-
memory/656-120-0x0000000002720000-0x000000000275E000-memory.dmpFilesize
248KB
-
memory/656-121-0x0000000004D82000-0x0000000004D83000-memory.dmpFilesize
4KB
-
memory/656-123-0x0000000004D84000-0x0000000004D86000-memory.dmpFilesize
8KB
-
memory/656-122-0x0000000004D83000-0x0000000004D84000-memory.dmpFilesize
4KB
-
memory/656-124-0x0000000004C30000-0x0000000004C31000-memory.dmpFilesize
4KB