Analysis
-
max time kernel
150s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-11-2024 09:43
General
-
Target
480f9bedc8a95771da253c1360872a30.exe
-
Size
457KB
-
MD5
480f9bedc8a95771da253c1360872a30
-
SHA1
b0f90af6c8c363f0edff502e2b4fe9ee586e6842
-
SHA256
b7d1af3d4eed6d0652021d2d9b317519e21a9f15b470c8f06ebb73c5b813b268
-
SHA512
cb23f3a4e4371a1fbc97f291aa70ae46e6e3c1ffb3ec496cf624db9a7aec99a330478100cda93505ccaf7096248b75613ed295305b406897e9d5b5365de5d179
-
SSDEEP
6144:YscI2xoKoQQOEZtqLQyLFDabYnOlaZRKUh95x+O97ITsqYigavwVfG:YscFTQOE/qrebrlaZ4WxJ7u7
Malware Config
Extracted
redline
SEWPALPADIN
45.9.20.112:57175
-
auth_value
5690233e096f92772f1ad7a4afefede9
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\480f9bedc8a95771da253c1360872a30.exe"C:\Users\Admin\AppData\Local\Temp\480f9bedc8a95771da253c1360872a30.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
172KB
-
Filesize
228KB
-
Filesize
240KB
-
Filesize
484KB
-
Filesize
208KB
-
Filesize
200KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
180KB
-
Filesize
172KB
-
Filesize
228KB
-
Filesize
240KB