Analysis
-
max time kernel
122s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
10/10/2023, 22:37
Behavioral task
behavioral1
Sample
2212-232-0x0000000000960000-0x0000000000B4A000-memory.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2212-232-0x0000000000960000-0x0000000000B4A000-memory.exe
Resource
win10v2004-20230915-en
General
-
Target
2212-232-0x0000000000960000-0x0000000000B4A000-memory.exe
-
Size
1.9MB
-
MD5
ad3cc6d5fe9806b79f5d737120d862aa
-
SHA1
b6aef4925f803a050039894e9c4fde1957bc142d
-
SHA256
b7e8d164c254d740af7e10ec24da140ffd1eaa5555b0a80875d464cc480aae4c
-
SHA512
9a9c6796b52fc37a76d4e4f1b7925069001e39940a19d0cc1d0e34d592212bfc435b4d6db505cefe60a7ba1b58c5f09f0dcfb5750aea101e2aa3b9b5a5cd67b3
-
SSDEEP
24576:ndbqo2OWZUJPnfcu47vh0CMpgjdQEg1Ngc+bN:mOWZUJ273ogjdNN
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
resource yara_rule behavioral1/memory/2940-0-0x0000000000960000-0x0000000000B4A000-memory.dmp family_redline