Analysis
- max time kernel
120s - max time network
137s - platform
windows10_x64 - resource
win10-en-20210920 - submitted
15/10/2021, 07:45
General
- Target ee903fe5cda8fc7a0305c6b374de5f69.exe
- Size 445KB
- Sample211015-jlfe4sbddl
- SHA256 e3dc88957f69ac53592f805873d387d17843db4ec0a0fa3dfd833f0a7a4d387a
Malware Config
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ee903fe5cda8fc7a0305c6b374de5f69.exe"C:\Users\Admin\AppData\Local\Temp\ee903fe5cda8fc7a0305c6b374de5f69.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1776-115-0x00000000018C6000-0x00000000018F9000-memory.dmp
memory/1776-116-0x0000000001750000-0x000000000189A000-memory.dmp
memory/1776-117-0x0000000000400000-0x00000000016E2000-memory.dmp
memory/1776-118-0x0000000003720000-0x000000000375F000-memory.dmp
memory/1776-119-0x0000000005C50000-0x0000000005C51000-memory.dmp
memory/1776-120-0x0000000006190000-0x00000000061CE000-memory.dmp
memory/1776-121-0x00000000035D0000-0x00000000035D1000-memory.dmp
memory/1776-122-0x00000000035D4000-0x00000000035D6000-memory.dmp
memory/1776-123-0x00000000035D2000-0x00000000035D3000-memory.dmp
memory/1776-124-0x00000000035D3000-0x00000000035D4000-memory.dmp
memory/1776-125-0x00000000061D0000-0x00000000061D1000-memory.dmp