Analysis
-
max time kernel
141s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
12-09-2023 13:45
Behavioral task
behavioral1
Sample
0x0006000000016d2a-40.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0x0006000000016d2a-40.exe
Resource
win10v2004-20230831-en
General
-
Target
0x0006000000016d2a-40.exe
-
Size
174KB
-
MD5
6c50becbbfaf0bccd3d16fb7e07a19e6
-
SHA1
c894d514f1809ec821f9291ac1fd23a6de168c3d
-
SHA256
d9e907200bcaf2e686e7acda6cd3a2898c392ce37171584f5082ca20225c87d0
-
SHA512
ed336ac7811ef1d547d4f1cd4b8a4e03fb517ca55873c2ebfe3e290f30b6a100e697fbf3d9a6f88ba5e40e7ac371ea470492b24464425f3254e373604c5bea84
-
SSDEEP
3072:7HMo+nMw2I0JQuIcWO3LPFlEqknE0iZFAoVhp8J48e8he:TMz2I0JQuIcznknE0IVhp8e
Malware Config
Extracted
redline
lada
77.91.124.82:19071
-
auth_value
252f78fed0684205b098417688fa33e2
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2544-0-0x0000000000AC0000-0x0000000000AF0000-memory.dmpFilesize
192KB
-
memory/2544-1-0x0000000074560000-0x0000000074D10000-memory.dmpFilesize
7.7MB
-
memory/2544-2-0x0000000005BC0000-0x00000000061D8000-memory.dmpFilesize
6.1MB
-
memory/2544-3-0x00000000056B0000-0x00000000057BA000-memory.dmpFilesize
1.0MB
-
memory/2544-4-0x0000000005430000-0x0000000005442000-memory.dmpFilesize
72KB
-
memory/2544-5-0x0000000005490000-0x00000000054A0000-memory.dmpFilesize
64KB
-
memory/2544-6-0x00000000055A0000-0x00000000055DC000-memory.dmpFilesize
240KB
-
memory/2544-7-0x0000000074560000-0x0000000074D10000-memory.dmpFilesize
7.7MB
-
memory/2544-8-0x0000000005490000-0x00000000054A0000-memory.dmpFilesize
64KB