Analysis
- max time kernel
294s - max time network
301s - platform
windows10-2004_x64 - resource
win10v2004-20230221-en - resource tags
- submitted
08/03/2023, 04:02
General
- Target 10d5b999c6a1d09f32c72905ee478b23cf3eb01a96aa010395357579330aa08f.exe
- Size 6.0MB
- Sample230308-el2acsdh65
- SHA256 10d5b999c6a1d09f32c72905ee478b23cf3eb01a96aa010395357579330aa08f
Score
10/10
Malware Config
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- Vidar
Vidar is an infostealer based on Arkei stealer.
Processes
-
C:\Users\Admin\AppData\Local\Temp\10d5b999c6a1d09f32c72905ee478b23cf3eb01a96aa010395357579330aa08f.exe"C:\Users\Admin\AppData\Local\Temp\10d5b999c6a1d09f32c72905ee478b23cf3eb01a96aa010395357579330aa08f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5108-133-0x0000000031AC0000-0x0000000031FB7000-memory.dmp
memory/5108-134-0x0000000033FA0000-0x00000000344C6000-memory.dmp
memory/5108-135-0x0000000033FA0000-0x00000000344C6000-memory.dmp
memory/5108-136-0x0000000033FA0000-0x00000000344C6000-memory.dmp
memory/5108-137-0x0000000033FA0000-0x00000000344C6000-memory.dmp
memory/5108-138-0x0000000033FA0000-0x00000000344C6000-memory.dmp
memory/5108-139-0x0000000033FA0000-0x00000000344C6000-memory.dmp