Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
25-05-2024 17:34
General
-
Target
Inject/Inject.exe
-
Size
10.0MB
-
MD5
5c02826d4b0ee2ba6f50a9fef4f31281
-
SHA1
57adb9017811b37fe756093c9b7c61181ef2fe8b
-
SHA256
8ecd9f59a8ddd6a3d3e520fafb41ff63cbe36f881dd250b50b7f9212a6bbac57
-
SHA512
823b8fe1626bc1bb76c6a78711a9135ca7ca4ca353646d23d27d0b409d10712f0d348de7b7cd3bb49f77b240d5e3f1c7d2379c6fd4688cc7e00e242228ae8183
-
SSDEEP
3072:dTbNi8i4NfbYSgmdy6rWN1cHa7UCBR/QmGTyxKcvy55b0hOY0AROlRO6M98M2Uz:bv+8SWCkusb0hOY0AROlRO6MzHOwpFK
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Inject\Inject.exe"C:\Users\Admin\AppData\Local\Temp\Inject\Inject.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2820-4-0x0000000000401000-0x0000000000403000-memory.dmpFilesize
8KB
-
memory/2820-0-0x0000000000220000-0x0000000000248000-memory.dmpFilesize
160KB
-
memory/2820-5-0x0000000000400000-0x0000000000446000-memory.dmpFilesize
280KB