Analysis
-
max time kernel
10s -
max time network
12s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
26-05-2024 11:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Mason.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mason.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Mason.exe
-
Size
183KB
-
MD5
5d5d09d6ae81f4fbebb699c960a22b31
-
SHA1
cea0fdb5307eda666e55e1e018697ac710d92f73
-
SHA256
c4223e54084a7088435cffa99e4c46dcaf025ad77f4d14e1f4b9b74c749c0b9f
-
SHA512
3a9ce8fd690e11887552a3bae04d889370eaf1c7f317bd6c255410a94fac93a4c305cc0353bf7726f9a1fe93fdd6030f3091e988042c6b0d1ac4b7b54cb8a086
-
SSDEEP
3072:a7SovsV4yye55lyjlmG5gJVX/2jyTvFkRzC2Tbj6lpaippjIQHPWGLChQZA1SGjo:qSow55lyjlL5gX/2TilpVpjIQHPWGLCk
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes:
resource yara_rule behavioral2/memory/1192-2-0x0000000000440000-0x0000000000468000-memory.dmp family_redline
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1192-0-0x0000000000401000-0x0000000000403000-memory.dmpFilesize
8KB
-
memory/1192-2-0x0000000000440000-0x0000000000468000-memory.dmpFilesize
160KB
-
memory/1192-5-0x0000000000400000-0x0000000000432000-memory.dmpFilesize
200KB
-
memory/1192-6-0x0000000006F80000-0x0000000007598000-memory.dmpFilesize
6.1MB
-
memory/1192-7-0x0000000007620000-0x0000000007632000-memory.dmpFilesize
72KB
-
memory/1192-8-0x0000000007640000-0x000000000774A000-memory.dmpFilesize
1.0MB
-
memory/1192-9-0x0000000007750000-0x000000000778C000-memory.dmpFilesize
240KB
-
memory/1192-10-0x0000000002530000-0x000000000257C000-memory.dmpFilesize
304KB