Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
21/10/2023, 08:05
Behavioral task
behavioral1
Sample
5044-557-0x00000000001F0000-0x00000000003DA000-memory.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
5044-557-0x00000000001F0000-0x00000000003DA000-memory.exe
Resource
win10v2004-20231020-en
General
-
Target
5044-557-0x00000000001F0000-0x00000000003DA000-memory.exe
-
Size
1.9MB
-
MD5
d482aa7409f958663ff24a29cc3320bf
-
SHA1
d10ad2d1d65d08aa05eab9b2bd8172bc0787367f
-
SHA256
08c03880f3ff4c7e2cf7258ed951f4da374250abdb1eccef151eb281784be9d1
-
SHA512
060055e593fad24dd5dc46dd49e9fe7e394f76382af054da8aadebbba7c89701c29e9d9ad6b9d152203c50a99a19876db62ca44a519a50701771ae9364251e3f
-
SSDEEP
24576:ETw0z8fcSug8/wUcorhv6t9C5izbNgcZwDyb40:E2fcSug8/dBAjC5din
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.