Overview

overview

10

Static

static

10

Redline_20...er.exe

windows7_x64

1

Redline_20...er.exe

windows10_x64

1

Redline_20...er.exe

windows10-2004_x64

1

Redline_20...er.exe

windows11_x64

Redline_20...ld.exe

windows7_x64

10

Redline_20...ld.exe

windows10_x64

10

Redline_20...ld.exe

windows10-2004_x64

10

Redline_20...ld.exe

windows11_x64

Redline_20...st.exe

windows7_x64

1

Redline_20...st.exe

windows10_x64

1

Redline_20...st.exe

windows10-2004_x64

1

Redline_20...st.exe

windows11_x64

Redline_20...er.exe

windows7_x64

4

Redline_20...er.exe

windows10_x64

4

Redline_20...er.exe

windows10-2004_x64

4

Redline_20...er.exe

windows11_x64

Redline_20...el.exe

windows7_x64

10

Redline_20...el.exe

windows10_x64

10

Redline_20...el.exe

windows10-2004_x64

10

Redline_20...el.exe

windows11_x64

Redline_20...me.exe

windows7_x64

8

Redline_20...me.exe

windows10_x64

8

Redline_20...me.exe

windows10-2004_x64

8

Redline_20...me.exe

windows11_x64

Redline_20...48.exe

windows7_x64

8

Redline_20...48.exe

windows10_x64

8

Redline_20...48.exe

windows10-2004_x64

8

Redline_20...48.exe

windows11_x64

Redline_20...ar.exe

windows7_x64

1

Redline_20...ar.exe

windows10_x64

1

Redline_20...ar.exe

windows10-2004_x64

1

Redline_20...ar.exe

windows11_x64

Analysis

  • max time kernel
    357s
  • max time network
    426s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    02-07-2022 14:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Redline_2021_stealer-main/Kurome.Builder/Kurome.Builder.exe

  • Size

    137KB

  • MD5

    cf38a4bde3fe5456dcaf2b28d3bfb709

  • SHA1

    711518af5fa13f921f3273935510627280730543

  • SHA256

    c47b78e566425fc4165a83b2661313e41ee8d66241f7bea7723304a6a751595e

  • SHA512

    3302b270ee028868ff877fa291c51e6c8b12478e7d873ddb9009bb68b55bd3a08a2756619b4415a76a5b4167abd7c7c3b9cc9f44c32a29225ff0fc2f94a1a4cc

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Redline_2021_stealer-main\Kurome.Builder\Kurome.Builder.exe
    "C:\Users\Admin\AppData\Local\Temp\Redline_2021_stealer-main\Kurome.Builder\Kurome.Builder.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1932-114-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-115-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-116-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-117-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-118-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-119-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-120-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-121-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-122-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-123-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-125-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-127-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-126-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-124-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-128-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-129-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-130-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-131-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-132-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-133-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-134-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-135-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-136-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-137-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-138-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-139-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-140-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-141-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-142-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-143-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-144-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-145-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-146-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-147-0x0000000000590000-0x00000000005B8000-memory.dmp
    Filesize

    160KB

    Download
  • memory/1932-148-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-149-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-150-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-151-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-152-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-153-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-154-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-155-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-156-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-157-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-158-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-159-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-160-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-161-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-162-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-163-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-164-0x00000000053D0000-0x00000000058CE000-memory.dmp
    Filesize

    5.0MB

    Download
  • memory/1932-165-0x0000000004ED0000-0x0000000004F62000-memory.dmp
    Filesize

    584KB

    Download
  • memory/1932-166-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-167-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-168-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-169-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-170-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-171-0x0000000004E50000-0x0000000004E5A000-memory.dmp
    Filesize

    40KB

    Download
  • memory/1932-172-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-173-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-174-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-175-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-176-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-177-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-178-0x00000000071C0000-0x000000000721E000-memory.dmp
    Filesize

    376KB

    Download
  • memory/1932-179-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-180-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-181-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/1932-182-0x0000000076F70000-0x00000000770FE000-memory.dmp
    Filesize

    1.6MB

    Download