Overview
overview
10Static
static
10Redline-cr...er.exe
windows7-x64
3Redline-cr...er.exe
windows10-2004-x64
3Redline-cr...db.dll
windows7-x64
1Redline-cr...db.dll
windows10-2004-x64
1Redline-cr...db.dll
windows7-x64
1Redline-cr...db.dll
windows10-2004-x64
1Redline-cr...ks.dll
windows7-x64
1Redline-cr...ks.dll
windows10-2004-x64
1Redline-cr...il.dll
windows7-x64
1Redline-cr...il.dll
windows10-2004-x64
1Redline-cr...ub.exe
windows7-x64
10Redline-cr...ub.exe
windows10-2004-x64
10Redline-cr...st.exe
windows7-x64
3Redline-cr...st.exe
windows10-2004-x64
3Redline-cr...CF.dll
windows7-x64
1Redline-cr...CF.dll
windows10-2004-x64
1Redline-cr...er.exe
windows7-x64
4Redline-cr...er.exe
windows10-2004-x64
4Redline-cr...).docx
windows7-x64
4Redline-cr...).docx
windows10-2004-x64
1Redline-cr...).docx
windows7-x64
3Redline-cr...).docx
windows10-2004-x64
1Redline-cr...el.exe
windows7-x64
10Redline-cr...el.exe
windows10-2004-x64
10Redline-cr...me.exe
windows7-x64
6Redline-cr...me.exe
windows10-2004-x64
6Redline-cr...48.exe
windows7-x64
7Redline-cr...48.exe
windows10-2004-x64
7Redline-cr...ar.exe
windows7-x64
1Redline-cr...ar.exe
windows10-2004-x64
1Analysis
-
max time kernel
0s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-11-2024 21:32
Behavioral task
behavioral1
Sample
Redline-crack-by-rzt/Kurome.Builder/Kurome.Builder.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Redline-crack-by-rzt/Kurome.Builder/Kurome.Builder.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.Mdb.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.Mdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.Pdb.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.Pdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.Rocks.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.Rocks.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Redline-crack-by-rzt/Kurome.Builder/Mono.Cecil.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Redline-crack-by-rzt/Kurome.Builder/stub.exe
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Redline-crack-by-rzt/Kurome.Builder/stub.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Redline-crack-by-rzt/Kurome.Host/Kurome.Host.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Redline-crack-by-rzt/Kurome.Host/Kurome.Host.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Redline-crack-by-rzt/Kurome.Host/Kurome.WCF.dll
Resource
win7-20241023-en
Behavioral task
behavioral16
Sample
Redline-crack-by-rzt/Kurome.Host/Kurome.WCF.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Redline-crack-by-rzt/Kurome.Loader/Kurome.Loader.exe
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
Redline-crack-by-rzt/Kurome.Loader/Kurome.Loader.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/FAQ (English).docx
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/FAQ (English).docx
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/FAQ(RUS).docx
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/FAQ(RUS).docx
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Panel/panel.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Panel/panel.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Tools/Chrome.exe
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Tools/Chrome.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Tools/NetFramework48.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Tools/NetFramework48.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Tools/WinRar.exe
Resource
win7-20241010-en
Behavioral task
behavioral30
Sample
Redline-crack-by-rzt/Panel/RedLine_20_2/Tools/WinRar.exe
Resource
win10v2004-20241007-en
General
-
Target
Redline-crack-by-rzt/Panel/RedLine_20_2/FAQ(RUS).docx
-
Size
51KB
-
MD5
aa9534a22d08fb17b6c50164ca226aba
-
SHA1
9d68e6e4b0ea3c41ad7f70733dc53628962765ce
-
SHA256
e3f9590d0a28e8f17d40f9a5a5489a963c6d5e722a324adf0d1d666ea424c89f
-
SHA512
a4290cf0f3ecbb25078a0d3f870ed6abcab83d831e107f59730cf5fbdbc0268ac831d8f31f18a08794e27e51ba302ecb5bdd4bac85f3887844ed881c363bb8b9
-
SSDEEP
1536:YmF2FkS3yM0Yj3ePetyogAcLrANZLI3dakgXeV:YNFkGem74Lr+k3v7V
Malware Config
Signatures
-
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1952 WINWORD.EXE
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16B
MD5d29962abc88624befc0135579ae485ec
SHA1e40a6458296ec6a2427bcb280572d023a9862b31
SHA256a91a702aab9b8dd722843d3d208a21bcfa6556dfc64e2ded63975de4511eb866
SHA5124311e87d8d5559248d4174908817a4ddc917bf7378114435cf12da8ccb7a1542c851812afbaf7dc106771bdb2e2d05f52e7d0c50d110fc7fffe4395592492c2f
-
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms
Filesize3KB
MD5bbeb432a8ab14270cbed3096144ead77
SHA1e827dde267a4d7504aded27e0328b2e48a4b3ee7
SHA256935bfb189e7abecc7f109d07523b587cff66aa174ae60b6121ce9a7e3e872c8f
SHA512269ba9b46e174b60dc4bbd82aa7f5976cc2cd0b055b4aa8f9182bea00de7503a76a20ed913ac965736eb4039125f54753e9cb9ddc0dcf9306c0baf925cfc1285