Analysis
-
max time kernel
142s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
10-11-2024 22:19
General
-
Target
8ef92577590803fac7d0c5b918e25f37b74b87bcf353806c6b2ed81ae4a584c0.exe
-
Size
1.2MB
-
MD5
7561d69fdc62a8a8647f7c33d4413ee4
-
SHA1
e28b5cbfc7f41e998fab1b1d33b419cfd7f85d64
-
SHA256
8ef92577590803fac7d0c5b918e25f37b74b87bcf353806c6b2ed81ae4a584c0
-
SHA512
93b4606197a9e76ae73f1eebbc38c0dede308d29f7d8b4228f86546ea59223fe395718fe52059af1299dfa353d9dfb0f456489d8d6c502d70be98b062149f7df
-
SSDEEP
24576:I1DT7B3uSHk1C5P9ILvWJ3oTJwP85+2HEPR/ekRn1RY5:I1/7BxwC99a03v8+2HEp/1n12
Malware Config
Extracted
redline
InvasionValorantHackV3.1
45.67.231.218:15411
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Redline family
-
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
-
SectopRAT payload 16 IoCs
-
Sectoprat family
-
Suspicious use of NtSetInformationThreadHideFromDebugger 16 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8ef92577590803fac7d0c5b918e25f37b74b87bcf353806c6b2ed81ae4a584c0.exe"C:\Users\Admin\AppData\Local\Temp\8ef92577590803fac7d0c5b918e25f37b74b87bcf353806c6b2ed81ae4a584c0.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
6.9MB
-
Filesize
3.6MB
-
Filesize
4KB
-
Filesize
3.6MB
-
Filesize
6.9MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB
-
Filesize
3.6MB