Analysis
-
max time kernel
300s -
max time network
304s -
platform
windows10-1703_x64 -
resource
win10-20220901-en -
resource tags
-
submitted
01-11-2022 10:31
General
-
Target
9cb88403480481561a8a8c6c85fdee2c3cbb3b2854a45d17fe9a4459855461a7.exe
-
Size
2.4MB
-
MD5
eab5b84b8a95af191249140195c0fc96
-
SHA1
be17f14d1ddf897f67329b9fd1fc0c2bd3784877
-
SHA256
9cb88403480481561a8a8c6c85fdee2c3cbb3b2854a45d17fe9a4459855461a7
-
SHA512
39c75787232f3294cf298a4c851d3a687909409ba1946ca13f9e26cdcf9dec14c6034a09fa6ff467962bc4e0a407042154b381c2e299f01740e65b8c065e688d
-
SSDEEP
24576:uWaIgjWkZAY/Y1MWbB91Mr8l0rimDc5/RS38lo8VEFianILsD67l3RuQ55313J:1kAzJk2VEFianIT7l33
Malware Config
Extracted
redline
152.89.219.248:19932
-
auth_value
2fcb95f9aced9dd605ebc53175867941
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9cb88403480481561a8a8c6c85fdee2c3cbb3b2854a45d17fe9a4459855461a7.exe"C:\Users\Admin\AppData\Local\Temp\9cb88403480481561a8a8c6c85fdee2c3cbb3b2854a45d17fe9a4459855461a7.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.4MB
-
Filesize
112KB
-
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
6.0MB
-
Filesize
72KB
-
Filesize
1.0MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
248KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
300KB