Analysis
-
max time kernel
152s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
03-10-2022 09:11
Behavioral task
behavioral1
Sample
21c63293a13296dc293a0e5a775b0146.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
21c63293a13296dc293a0e5a775b0146.exe
Resource
win10v2004-20220901-en
General
-
Target
21c63293a13296dc293a0e5a775b0146.exe
-
Size
97KB
-
MD5
21c63293a13296dc293a0e5a775b0146
-
SHA1
e9f7665b02c8e44f3b80ed4fd28816201cda89da
-
SHA256
50cf840ea1c68345adb398c5c3f33fcbadd750a095b5687d7a5735aab7088824
-
SHA512
393263f08d45c5fe676ffe1b5d7958d7211349ba63835ca33fb878e2c5ba149c86b9aeee32f8e8b5ec07a008f2e3be41467ec4fc42237b5a6427b3cb2c6cacea
-
SSDEEP
1536:yj1yw39pOq7JkjAYOrOyitVC7uMqBcQjloJQYr4hUndpAz+WTxXv/K:yj1yk0AYQOyiRwOIihUndpFWV/S
Malware Config
Extracted
redline
NGONDUNGVAO
103.74.103.52:24343
-
auth_value
c26fcf86ed5f26d2fadc52a8f9ea2e4c
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2072-132-0x00000000007B0000-0x00000000007CE000-memory.dmpFilesize
120KB
-
memory/2072-133-0x0000000005690000-0x0000000005CA8000-memory.dmpFilesize
6.1MB
-
memory/2072-134-0x0000000005130000-0x0000000005142000-memory.dmpFilesize
72KB
-
memory/2072-135-0x0000000005260000-0x000000000536A000-memory.dmpFilesize
1.0MB
-
memory/2072-136-0x0000000005190000-0x00000000051CC000-memory.dmpFilesize
240KB