Analysis
-
max time kernel
300s -
max time network
303s -
platform
windows10-1703_x64 -
resource
win10-20220812-en -
resource tags
-
submitted
01/11/2022, 11:59
General
-
Target
fde7a181f3e8c5ee185e773a614ed6653772929f9029f4b3b8443886489a58e6.exe
-
Size
2.4MB
-
MD5
07ac5440062c5365a1a8e9eeaa893b8f
-
SHA1
dcfc3b6ca757e7b591af11a5ae753319c39ecc0e
-
SHA256
fde7a181f3e8c5ee185e773a614ed6653772929f9029f4b3b8443886489a58e6
-
SHA512
7bf353f54056b521b2c1b6e3b91618583b8e2a5dfa5fb17cfacea7bf36227273391dd8ff5353ac98642f8b28ba89ae9badafce850f604ebb71db252331077061
-
SSDEEP
24576:6eW+TYE+1YDYFdy3fSlM+ld4nYhqiCOSgW2fRQidULcNOZNKql3RuQ55313R:6/JEEdYvOtWARQidUUql3r
Malware Config
Extracted
redline
194.26.229.212:47495
-
auth_value
4ecb8f70a78c110cf5e92deaf5855f22
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext 1 IoCs
-
Suspicious use of WriteProcessMemory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fde7a181f3e8c5ee185e773a614ed6653772929f9029f4b3b8443886489a58e6.exe"C:\Users\Admin\AppData\Local\Temp\fde7a181f3e8c5ee185e773a614ed6653772929f9029f4b3b8443886489a58e6.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"C:\Windows\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe"2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
112KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
6.0MB
-
Filesize
72KB
-
Filesize
1.0MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
248KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
300KB