Overview
overview
10Static
static
10Новая...6).zip
windows10-1703-x64
1Новая...6).zip
windows10-2004-x64
1Новая.../1.exe
windows10-1703-x64
10Новая.../1.exe
windows10-2004-x64
10Новая.../2.exe
windows10-1703-x64
10Новая.../2.exe
windows10-2004-x64
10Новая.../3.exe
windows10-1703-x64
10Новая.../3.exe
windows10-2004-x64
10Новая.../4.exe
windows10-1703-x64
10Новая.../4.exe
windows10-2004-x64
10Новая.../5.exe
windows10-1703-x64
10Новая.../5.exe
windows10-2004-x64
10Analysis
-
max time kernel
151s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
15/08/2023, 14:46
Behavioral task
behavioral1
Sample
Новая папка (16).zip
Resource
win10-20230703-en
Behavioral task
behavioral2
Sample
Новая папка (16).zip
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
Новая папка (16)/1.exe
Resource
win10-20230703-en
Behavioral task
behavioral4
Sample
Новая папка (16)/1.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
Новая папка (16)/2.exe
Resource
win10-20230703-en
Behavioral task
behavioral6
Sample
Новая папка (16)/2.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
Новая папка (16)/3.exe
Resource
win10-20230703-en
Behavioral task
behavioral8
Sample
Новая папка (16)/3.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
Новая папка (16)/4.exe
Resource
win10-20230703-en
Behavioral task
behavioral10
Sample
Новая папка (16)/4.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
Новая папка (16)/5.exe
Resource
win10-20230703-en
Behavioral task
behavioral12
Sample
Новая папка (16)/5.exe
Resource
win10v2004-20230703-en
General
-
Target
Новая папка (16)/2.exe
-
Size
341KB
-
MD5
380059aa0629cf577691c77d9bb2b641
-
SHA1
7fa57c2c3742906dce3c51cf6d2fde8ae96866b6
-
SHA256
2d7c4c256baee481a7b7454b70854adaf7d57dba374de6cfb82ba21e961e7054
-
SHA512
2b125c2eae36534f80db085f092ede490ab9e0b9448446f3c9da6040aa7ea297db82208b69a4c23033625eab0d59cdad9460e7919e1026203764db61696f30cc
-
SSDEEP
6144:sgkfqpvErytsYaQOGHYRdQ6R9ebvoaXyxRkCN1aUTi:+qVaYTLcebvoaXyxRkx
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
resource yara_rule behavioral6/memory/3880-134-0x00000000002C0000-0x000000000031A000-memory.dmp family_redline