Analysis
-
max time kernel
300s -
max time network
303s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
01/11/2022, 09:08
General
-
Target
3f4e11d0578c3ff16bf06223ee2e002c974b3cce8beee42e1477e3dd1651af62.exe
-
Size
2.4MB
-
MD5
2a2a0e591a210036c2c759c1e55a71c4
-
SHA1
bfdb8ac935dd709781b781a9af707dbb6c21b6a2
-
SHA256
3f4e11d0578c3ff16bf06223ee2e002c974b3cce8beee42e1477e3dd1651af62
-
SHA512
ab08a2bcb3ecf5edf9c7abe239a2bf1c839beafcbb7a42c80dbe9130188a803f973d2c37e6253c45c14df48f5452a161fc09edaa6f39a7da4f73174fd5c0fe87
-
SSDEEP
24576:yYK7vYaY01FGiX5M1OoxXrZwZbrGwOjG7nJyGML/5l3RuQ55313E:tKzGnwOK7nJyGMNl3q
Malware Config
Extracted
redline
1289087590_99
topbe24.xyz:28786
-
auth_value
4825d8be04f79323d5e9daee4d2c929e
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3f4e11d0578c3ff16bf06223ee2e002c974b3cce8beee42e1477e3dd1651af62.exe"C:\Users\Admin\AppData\Local\Temp\3f4e11d0578c3ff16bf06223ee2e002c974b3cce8beee42e1477e3dd1651af62.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
120KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
72KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
248KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
300KB