Overview

overview

10

Static

static

1

SecuriteIn...86.exe

windows7-x64

10

SecuriteIn...86.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-03-2023 13:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SecuriteInfo.com.Variant.Mikey.145425.22281.4686.exe

  • Size

    301KB

  • MD5

    c780b3167a20b5a301cf38a47632e8ad

  • SHA1

    d40f9a142823ff045ef1744f295eea28ad5ea45d

  • SHA256

    4bfeeb31bc6bf577688eab439cd5e32d21bf6e78550f621acc9d1f6820d8c067

  • SHA512

    eec57c4cf26a638f9d235d101498d687022e71939a53edac0c11270b80f1e378ddacd084c2eba9a43705cfb6aeb7d4d4a4af369978f19de40667690f3cb95377

  • SSDEEP

    3072:aQ3XmDX/mIMhZYn4jMEi+Ts1HBIexK+K0sc7I/xTTvyUYGyraHH2DmcnnIHiJlqP:teXuIMhqB6mmdzxdYaH2Dm2nIUGjyn

Score
10/10
redlinefudinfostealer

Malware Config

Extracted

Family

redline

Botnet

fud

C2

193.233.20.27:4123

Attributes
  • auth_value

    cddc991efd6918ad5321d80dac884b40

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 33 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Mikey.145425.22281.4686.exe
    "C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Variant.Mikey.145425.22281.4686.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2620-134-0x00000000021B0000-0x00000000021FB000-memory.dmp
    Filesize

    300KB

    Download
  • memory/2620-135-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2620-136-0x0000000004C00000-0x00000000051A4000-memory.dmp
    Filesize

    5.6MB

    Download
  • memory/2620-137-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2620-138-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-139-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-141-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-143-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-145-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-147-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-149-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-153-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-151-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-155-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-157-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-159-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-163-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-169-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-167-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-171-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-173-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-165-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-161-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-177-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-179-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-175-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-181-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-183-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-185-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-189-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-201-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-199-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-197-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-195-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-193-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-191-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-187-0x0000000004B50000-0x0000000004B8E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2620-1044-0x00000000051B0000-0x00000000057C8000-memory.dmp
    Filesize

    6.1MB

    Download
  • memory/2620-1045-0x0000000005850000-0x000000000595A000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/2620-1046-0x0000000005990000-0x00000000059A2000-memory.dmp
    Filesize

    72KB

    Download
  • memory/2620-1047-0x00000000059B0000-0x00000000059EC000-memory.dmp
    Filesize

    240KB

    Download
  • memory/2620-1049-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2620-1050-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2620-1051-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2620-1052-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download
  • memory/2620-1054-0x0000000004BF0000-0x0000000004C00000-memory.dmp
    Filesize

    64KB

    Download