Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-1703_x64 -
resource
win10-20230220-en -
resource tags
-
submitted
24-04-2023 15:39
General
-
Target
Redline Stealer v24.2 cracked [XT_CH]/Panel/RedLine_24_2/Panel/._cache_Panel.exe
-
Size
1.1MB
-
MD5
9484745bead43302d149113d418a3437
-
SHA1
f28cdeb7daefa5be6d324a6c99cbb07a00f1b174
-
SHA256
95b632d09117daa3bd75c70db03a128e222b7e78e0415d4a5ddb1f8664320e32
-
SHA512
e07b57f95e7794dea137bb4d1517ccbf68c7327941096522f5d5bf5962e340f0a3d0431351c13fa8606e8c48532dcbdf31be364581287edc1ce9dfe4abdae449
-
SSDEEP
12288:BMSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V9aN6qsUwXPDt4IN6qsUwXY:BnsJ39LyjbJkQFMhmC+6GD9YaJFawJ
Score
10/10
Malware Config
Signatures
-
AsyncRat
AsyncRAT is designed to remotely monitor and control other computers written in C#.
-
StormKitty
StormKitty is an open source info stealer written in C#.
-
StormKitty payload 1 IoCs
-
Async RAT payload 1 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Redline Stealer v24.2 cracked [XT_CH]\Panel\RedLine_24_2\Panel\._cache_Panel.exe"C:\Users\Admin\AppData\Local\Temp\Redline Stealer v24.2 cracked [XT_CH]\Panel\RedLine_24_2\Panel\._cache_Panel.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2064 -s 6202⤵
- Program crash
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2064-121-0x0000000000670000-0x0000000000671000-memory.dmpFilesize
4KB
-
memory/2064-122-0x0000000000400000-0x0000000000520000-memory.dmpFilesize
1.1MB