Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    21/10/2023, 08:05

General

  • Target

    5044-557-0x00000000001F0000-0x00000000003DA000-memory.exe

  • Size

    1.9MB

  • MD5

    d482aa7409f958663ff24a29cc3320bf

  • SHA1

    d10ad2d1d65d08aa05eab9b2bd8172bc0787367f

  • SHA256

    08c03880f3ff4c7e2cf7258ed951f4da374250abdb1eccef151eb281784be9d1

  • SHA512

    060055e593fad24dd5dc46dd49e9fe7e394f76382af054da8aadebbba7c89701c29e9d9ad6b9d152203c50a99a19876db62ca44a519a50701771ae9364251e3f

  • SSDEEP

    24576:ETw0z8fcSug8/wUcorhv6t9C5izbNgcZwDyb40:E2fcSug8/dBAjC5din

Score
10/10

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

Processes

  • C:\Users\Admin\AppData\Local\Temp\5044-557-0x00000000001F0000-0x00000000003DA000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\5044-557-0x00000000001F0000-0x00000000003DA000-memory.exe"
    1⤵
      PID:2372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2372-0-0x00000000001F0000-0x00000000003DA000-memory.dmp

      Filesize

      1.9MB