280034548174360763aa21c7066de03156a980d0ef21c550bd5df7956f045917

Analysis

max time kernel
412s
max time network
418s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
01/04/2023, 11:11

Target

Redline-Stealer-main.exe
Size

26.9MB
MD5

3ee9f2865914c7d023adffcdef86c3ce
SHA1

15de8918817b44e1abf742db8aa68bc60d6b614f
SHA256

280034548174360763aa21c7066de03156a980d0ef21c550bd5df7956f045917
SHA512

9e76f78702d0127679c3d6a922b3f70c2c3fa195f526f2c111b451e6b8fa189db582153a89937a10152a057e1585e15d24e2d9ec8d81f927c9293921e0c27789
SSDEEP

786432:sfhbvd1ErUqPanwFcoDvdaOkXJ20gy9tN3ACC/TO:Ed1ETPdPkXJ20ZATT

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1368	Redline-Stealer-main.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1060 wrote to memory of 1368	1060	Redline-Stealer-main.exe	27
PID 1060 wrote to memory of 1368	1060	Redline-Stealer-main.exe	27
PID 1060 wrote to memory of 1368	1060	Redline-Stealer-main.exe	27

C:\Users\Admin\AppData\Local\Temp\Redline-Stealer-main.exe
"C:\Users\Admin\AppData\Local\Temp\Redline-Stealer-main.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1060
- C:\Users\Admin\AppData\Local\Temp\Redline-Stealer-main.exe
  "C:\Users\Admin\AppData\Local\Temp\Redline-Stealer-main.exe"
  2⤵
  - Loads dropped DLL
  PID:1368

C:\Users\Admin\AppData\Local\Temp\_MEI10602\python39.dll

Filesize
4.3MB

MD5
0c74e7172e79148d2c995951cb828fa1

SHA1
6e46616de50a7871668b2e6a22895b9c594d232a

SHA256
3937d1865f5a6f9ba892705bbe75352defc7b083b61894a4bdb6adefe0c2b39d

SHA512
bbca4b2c6338f0d4274c5db371cae075834677844e457280d8d9f2c5ba74b3a9a159aeb978cf3fa4983d2efda62cbc2c9570d56e4a9682324f7fc7c2788ede86

Download Submit
\Users\Admin\AppData\Local\Temp\_MEI10602\python39.dll

Filesize
4.3MB

MD5
0c74e7172e79148d2c995951cb828fa1

SHA1
6e46616de50a7871668b2e6a22895b9c594d232a

SHA256
3937d1865f5a6f9ba892705bbe75352defc7b083b61894a4bdb6adefe0c2b39d

SHA512
bbca4b2c6338f0d4274c5db371cae075834677844e457280d8d9f2c5ba74b3a9a159aeb978cf3fa4983d2efda62cbc2c9570d56e4a9682324f7fc7c2788ede86

Download Submit