Analysis

  • max time kernel
    122s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    10/10/2023, 22:37

General

  • Target

    2212-232-0x0000000000960000-0x0000000000B4A000-memory.exe

  • Size

    1.9MB

  • MD5

    ad3cc6d5fe9806b79f5d737120d862aa

  • SHA1

    b6aef4925f803a050039894e9c4fde1957bc142d

  • SHA256

    b7e8d164c254d740af7e10ec24da140ffd1eaa5555b0a80875d464cc480aae4c

  • SHA512

    9a9c6796b52fc37a76d4e4f1b7925069001e39940a19d0cc1d0e34d592212bfc435b4d6db505cefe60a7ba1b58c5f09f0dcfb5750aea101e2aa3b9b5a5cd67b3

  • SSDEEP

    24576:ndbqo2OWZUJPnfcu47vh0CMpgjdQEg1Ngc+bN:mOWZUJ273ogjdNN

Score
10/10

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2212-232-0x0000000000960000-0x0000000000B4A000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2212-232-0x0000000000960000-0x0000000000B4A000-memory.exe"
    1⤵
      PID:2940

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2940-0-0x0000000000960000-0x0000000000B4A000-memory.dmp

            Filesize

            1.9MB