Analysis
-
max time kernel
147s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
05/01/2024, 14:09
General
-
Target
43e2bbb74cd312a335150df868b946d2.exe
-
Size
124KB
-
MD5
43e2bbb74cd312a335150df868b946d2
-
SHA1
d9632084c1936e823ad2d7b69f8338f529a88e72
-
SHA256
3c308aec22e705cd9b9d793e0e1ed3929766483c4c74ac4a160bcf37a53cc792
-
SHA512
becbe4fb853dec3e0e84cb4e2a2115844d9864c37457b4a3f537ffa3242e08f275cb0fec9bfa2d1560131dfaf8cfc8b710d77709d97f602155d1e69a2e734741
-
SSDEEP
3072:EPvmmscYXMAIGmdvdX9UfyGLahhygfSTf1:sssvxlDygw
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
-
Program crash 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\43e2bbb74cd312a335150df868b946d2.exe"C:\Users\Admin\AppData\Local\Temp\43e2bbb74cd312a335150df868b946d2.exe"1⤵
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 3664 -s 8882⤵
- Program crash
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 432 -p 3664 -ip 36641⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
152KB
-
Filesize
64KB
-
Filesize
32KB
-
Filesize
7.7MB