Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
06-09-2023 19:17
Behavioral task
behavioral1
Sample
n5689015_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
n5689015_JC.exe
Resource
win10v2004-20230831-en
General
-
Target
n5689015_JC.exe
-
Size
175KB
-
MD5
5e4f505d24096da9b7c33b1dd98776a3
-
SHA1
27a9feb5d6ce7ff6967292b065dcb96af63f0e29
-
SHA256
9d21e040c835833b905f544b2a4367daca346129f4b5e28377500be7e5fc77aa
-
SHA512
1f939a096e1ff8ad9d70c15db226279e8c26b1e8eb1c71dfecea9988de565f13003dc30e020ef43538c3e8f86bc9b56d022c6a87cc8bfd7a38742774ad4a1230
-
SSDEEP
3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e
Malware Config
Extracted
redline
gena
77.91.124.82:19071
-
auth_value
93c20961cb6b06b2d5781c212db6201e
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/3012-0-0x0000000074E40000-0x00000000755F0000-memory.dmpFilesize
7.7MB
-
memory/3012-1-0x0000000000D90000-0x0000000000DC0000-memory.dmpFilesize
192KB
-
memory/3012-2-0x000000000B200000-0x000000000B818000-memory.dmpFilesize
6.1MB
-
memory/3012-3-0x000000000ACF0000-0x000000000ADFA000-memory.dmpFilesize
1.0MB
-
memory/3012-4-0x0000000005750000-0x0000000005760000-memory.dmpFilesize
64KB
-
memory/3012-5-0x000000000AC30000-0x000000000AC42000-memory.dmpFilesize
72KB
-
memory/3012-6-0x000000000AC90000-0x000000000ACCC000-memory.dmpFilesize
240KB
-
memory/3012-7-0x0000000074E40000-0x00000000755F0000-memory.dmpFilesize
7.7MB
-
memory/3012-8-0x0000000005750000-0x0000000005760000-memory.dmpFilesize
64KB