Analysis
-
max time kernel
139s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
26-10-2023 15:26
Behavioral task
behavioral1
Sample
66B4646D05C237615F220CD5530B776E424EF3482C08B.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
66B4646D05C237615F220CD5530B776E424EF3482C08B.exe
Resource
win10v2004-20231023-en
General
-
Target
66B4646D05C237615F220CD5530B776E424EF3482C08B.exe
-
Size
174KB
-
MD5
f8822c5ad94d960211c2e263197a0ee8
-
SHA1
bf11061281f53044bf36b20ad8a89be7a31e1c6e
-
SHA256
66b4646d05c237615f220cd5530b776e424ef3482c08b58bbbaad413c79226bd
-
SHA512
c34d8f5eae9a35bb4e4a169bc9a3853f9a0efa1dbb5098da397aa8f3c792128cc5495e5b78d53af3500d48ca8772e324b1b61e5a507aa09a2e2a7b8a04a64c90
-
SSDEEP
3072:XEVe58FI0i24iXOXCN68SOE0m3m+MCmJc8e8hE:XEHFI0i24iDSOE0CMCma
Malware Config
Extracted
redline
2
45.150.67.103:7874
-
auth_value
027a9c4511550bd738c5f665a2d25316
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/4316-0-0x0000000075200000-0x00000000759B0000-memory.dmpFilesize
7.7MB
-
memory/4316-1-0x00000000009F0000-0x0000000000A20000-memory.dmpFilesize
192KB
-
memory/4316-2-0x0000000002E30000-0x0000000002E36000-memory.dmpFilesize
24KB
-
memory/4316-3-0x0000000005B10000-0x0000000006128000-memory.dmpFilesize
6.1MB
-
memory/4316-4-0x0000000005600000-0x000000000570A000-memory.dmpFilesize
1.0MB
-
memory/4316-6-0x00000000053E0000-0x00000000053F0000-memory.dmpFilesize
64KB
-
memory/4316-5-0x0000000005360000-0x0000000005372000-memory.dmpFilesize
72KB
-
memory/4316-7-0x00000000054F0000-0x000000000552C000-memory.dmpFilesize
240KB
-
memory/4316-8-0x0000000005530000-0x000000000557C000-memory.dmpFilesize
304KB
-
memory/4316-9-0x0000000075200000-0x00000000759B0000-memory.dmpFilesize
7.7MB
-
memory/4316-10-0x00000000053E0000-0x00000000053F0000-memory.dmpFilesize
64KB