Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-06-2024 15:41

General

  • Target

    TeleKiller v2.1 (1).exe

  • Size

    17.0MB

  • MD5

    e53ddf7ef17bed3a0112cbacd388de0c

  • SHA1

    486e6267c3bd1e11b80e2e4ed32de94bd0d109b0

  • SHA256

    2d6ea2cce62a8be659002ef8c7f36f2ab11c282cceb17882c905730e0cb95e60

  • SHA512

    673bcba47f3d303da6f99ac009f6ddba0e73feafb61c80bb85f06511cd521277f014ecb321e07bfa2066d6c15a8d9926b5b888a3df3bfe45cb51da097793c5e6

  • SSDEEP

    3072:3ye5w2CKxc9Pf/ymxEd0wicU3JgnEdO+oIqCEZAv0ZGoa/:u2CKxc93FXcU5lO+oIqCEjZG3/

Score
10/10

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TeleKiller v2.1 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\TeleKiller v2.1 (1).exe"
    1⤵
      PID:1368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1368-0-0x0000000000401000-0x0000000000403000-memory.dmp

      Filesize

      8KB

    • memory/1368-1-0x0000000000480000-0x00000000004A8000-memory.dmp

      Filesize

      160KB

    • memory/1368-5-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB

    • memory/1368-6-0x0000000006E10000-0x0000000007428000-memory.dmp

      Filesize

      6.1MB

    • memory/1368-7-0x00000000074A0000-0x00000000074B2000-memory.dmp

      Filesize

      72KB

    • memory/1368-8-0x00000000074C0000-0x00000000075CA000-memory.dmp

      Filesize

      1.0MB

    • memory/1368-9-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB

    • memory/1368-10-0x00000000075D0000-0x000000000760C000-memory.dmp

      Filesize

      240KB

    • memory/1368-11-0x0000000004480000-0x00000000044CC000-memory.dmp

      Filesize

      304KB

    • memory/1368-12-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB

    • memory/1368-13-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB