Analysis
- max time kernel
123s - max time network
122s - platform
windows7_x64 - resource
win7-en-20211014 - submitted
15/10/2021, 07:45
General
- Target ee903fe5cda8fc7a0305c6b374de5f69.exe
- Size 445KB
- Sample211015-jlfe4sbddl
- SHA256 e3dc88957f69ac53592f805873d387d17843db4ec0a0fa3dfd833f0a7a4d387a
Score
10/10
Malware Config
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee903fe5cda8fc7a0305c6b374de5f69.exe"C:\Users\Admin\AppData\Local\Temp\ee903fe5cda8fc7a0305c6b374de5f69.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1184-54-0x000000000183B000-0x000000000186D000-memory.dmp
memory/1184-56-0x0000000000400000-0x00000000016E2000-memory.dmp
memory/1184-55-0x0000000000270000-0x00000000002B0000-memory.dmp
memory/1184-57-0x00000000017E0000-0x000000000181F000-memory.dmp
memory/1184-59-0x0000000005BD2000-0x0000000005BD3000-memory.dmp
memory/1184-58-0x0000000005BD1000-0x0000000005BD2000-memory.dmp
memory/1184-60-0x0000000005BD3000-0x0000000005BD4000-memory.dmp
memory/1184-61-0x00000000032C0000-0x00000000032FE000-memory.dmp
memory/1184-62-0x0000000005BD4000-0x0000000005BD6000-memory.dmp