Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11-06-2024 15:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TeleKiller v2.1 (1).exe
Resource
win7-20240215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
TeleKiller v2.1 (1).exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
TeleKiller v2.1 (1).exe
-
Size
17.0MB
-
MD5
e53ddf7ef17bed3a0112cbacd388de0c
-
SHA1
486e6267c3bd1e11b80e2e4ed32de94bd0d109b0
-
SHA256
2d6ea2cce62a8be659002ef8c7f36f2ab11c282cceb17882c905730e0cb95e60
-
SHA512
673bcba47f3d303da6f99ac009f6ddba0e73feafb61c80bb85f06511cd521277f014ecb321e07bfa2066d6c15a8d9926b5b888a3df3bfe45cb51da097793c5e6
-
SSDEEP
3072:3ye5w2CKxc9Pf/ymxEd0wicU3JgnEdO+oIqCEZAv0ZGoa/:u2CKxc93FXcU5lO+oIqCEjZG3/
Score
10/10
Malware Config
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
resource yara_rule behavioral2/memory/1368-1-0x0000000000480000-0x00000000004A8000-memory.dmp family_redline