Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-06-2024 16:57

General

  • Target

    TeleSnos1.2.exe

  • Size

    27.0MB

  • MD5

    ed6192fb5994f6d812aeb39db5a7100d

  • SHA1

    7bbf863d3fce5356615e05f85d451d4b9438ca13

  • SHA256

    e15fe991058d47374c223915de0b18933c7577b986518c5e4d6fa6265fd9b11f

  • SHA512

    eccc6c97bfe66dbe69465a68d292b4f3996252ff6e41bfcc2b613033d1fdf39ab0a8b65af5f2d5ed16a0757767efdfb2f6f18a583c31ac38c370962f613d8c0f

  • SSDEEP

    3072:0eWSf/2CBdcKgW/y2xEd0wicU3JgnEdO+oIqaEZAv0ZGoa/:06X2CBdcKh1XcU5lO+oIqaEjZG3/

Score
10/10

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\TeleSnos1.2.exe
    "C:\Users\Admin\AppData\Local\Temp\TeleSnos1.2.exe"
    1⤵
      PID:4552

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4552-0-0x0000000000401000-0x0000000000403000-memory.dmp

      Filesize

      8KB

    • memory/4552-1-0x0000000000660000-0x0000000000688000-memory.dmp

      Filesize

      160KB

    • memory/4552-5-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB

    • memory/4552-6-0x0000000006E20000-0x0000000007438000-memory.dmp

      Filesize

      6.1MB

    • memory/4552-7-0x00000000074E0000-0x00000000074F2000-memory.dmp

      Filesize

      72KB

    • memory/4552-8-0x0000000007500000-0x000000000760A000-memory.dmp

      Filesize

      1.0MB

    • memory/4552-9-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB

    • memory/4552-10-0x0000000007640000-0x000000000767C000-memory.dmp

      Filesize

      240KB

    • memory/4552-11-0x0000000004490000-0x00000000044DC000-memory.dmp

      Filesize

      304KB

    • memory/4552-12-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB

    • memory/4552-13-0x0000000000400000-0x0000000000437000-memory.dmp

      Filesize

      220KB