Overview

overview

10

Static

static

10

Redline_20...er.exe

windows7_x64

1

Redline_20...er.exe

windows10_x64

1

Redline_20...er.exe

windows10-2004_x64

1

Redline_20...er.exe

windows11_x64

Redline_20...ld.exe

windows7_x64

10

Redline_20...ld.exe

windows10_x64

10

Redline_20...ld.exe

windows10-2004_x64

10

Redline_20...ld.exe

windows11_x64

Redline_20...st.exe

windows7_x64

1

Redline_20...st.exe

windows10_x64

1

Redline_20...st.exe

windows10-2004_x64

1

Redline_20...st.exe

windows11_x64

Redline_20...er.exe

windows7_x64

4

Redline_20...er.exe

windows10_x64

4

Redline_20...er.exe

windows10-2004_x64

4

Redline_20...er.exe

windows11_x64

Redline_20...el.exe

windows7_x64

10

Redline_20...el.exe

windows10_x64

10

Redline_20...el.exe

windows10-2004_x64

10

Redline_20...el.exe

windows11_x64

Redline_20...me.exe

windows7_x64

8

Redline_20...me.exe

windows10_x64

8

Redline_20...me.exe

windows10-2004_x64

8

Redline_20...me.exe

windows11_x64

Redline_20...48.exe

windows7_x64

8

Redline_20...48.exe

windows10_x64

8

Redline_20...48.exe

windows10-2004_x64

8

Redline_20...48.exe

windows11_x64

Redline_20...ar.exe

windows7_x64

1

Redline_20...ar.exe

windows10_x64

1

Redline_20...ar.exe

windows10-2004_x64

1

Redline_20...ar.exe

windows11_x64

Analysis

  • max time kernel
    305s
  • max time network
    376s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    02-07-2022 14:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Redline_2021_stealer-main/Kurome.Host/Kurome.Host.exe

  • Size

    119KB

  • MD5

    4fde0f80c408af27a8d3ddeffea12251

  • SHA1

    e834291127af150ce287443c5ea607a7ae337484

  • SHA256

    1b644cdb1c7247c07d810c0ea10bec34dc5600f3645589690a219de08cf2dedb

  • SHA512

    3693aeaa2cc276060b899f21f6f57f435b75fec5bcd7725b2dd79043b341c12ebc29bd43b287eb22a3e31fd2b50c4fa36bf020f9f3db5e2f75fe8cc747eca5f5

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Redline_2021_stealer-main\Kurome.Host\Kurome.Host.exe
    "C:\Users\Admin\AppData\Local\Temp\Redline_2021_stealer-main\Kurome.Host\Kurome.Host.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1492-119-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-120-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-121-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-122-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-123-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-124-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-125-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-126-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-127-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-128-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-132-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-131-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-130-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-129-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-133-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-134-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-136-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-135-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-138-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-137-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-139-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-140-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-141-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-142-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-143-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-144-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-145-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-146-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-147-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-148-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-149-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-150-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-151-0x0000000000350000-0x0000000000374000-memory.dmp
    Filesize

    144KB

    Download
  • memory/1492-153-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-152-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-154-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-155-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-156-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-157-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-158-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-160-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-161-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-162-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-164-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-163-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-165-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-159-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-167-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-166-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-168-0x0000000004CA0000-0x0000000004CC6000-memory.dmp
    Filesize

    152KB

    Download
  • memory/1492-169-0x00000000054D0000-0x0000000005AD6000-memory.dmp
    Filesize

    6.0MB

    Download
  • memory/1492-170-0x0000000004D50000-0x0000000004D62000-memory.dmp
    Filesize

    72KB

    Download
  • memory/1492-171-0x0000000004E20000-0x0000000004E5E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/1492-172-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-173-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-175-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-174-0x0000000004D70000-0x0000000004DBB000-memory.dmp
    Filesize

    300KB

    Download
  • memory/1492-176-0x0000000004F90000-0x000000000505E000-memory.dmp
    Filesize

    824KB

    Download
  • memory/1492-177-0x0000000005170000-0x000000000527A000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/1492-178-0x0000000004EF0000-0x0000000004F18000-memory.dmp
    Filesize

    160KB

    Download
  • memory/1492-179-0x0000000005060000-0x00000000050B0000-memory.dmp
    Filesize

    320KB

    Download
  • memory/1492-180-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-181-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-182-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-184-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-185-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-183-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-188-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-187-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-189-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1492-186-0x0000000077820000-0x00000000779AE000-memory.dmp
    Filesize

    1.6MB

    Download