Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10/11/2024, 23:56
General
-
Target
06aa750e2aa74a1b400f885ecaa08746e4ce921d4435f7256ecc61c5b7f3e4a2.exe
-
Size
354KB
-
MD5
a32a1371aa96c4a05718487e81a5076f
-
SHA1
4aa52babf91fa19c992ec2b1e2f8a31a316a2784
-
SHA256
06aa750e2aa74a1b400f885ecaa08746e4ce921d4435f7256ecc61c5b7f3e4a2
-
SHA512
2a15018c2ce0591a3acf2e1aeffff9ead9ddc2aadd8217616264697d1dabb8decc470e48dca27ab205378471f3a241bfd7b8d0f6acb2bc46851a42537fc8f246
-
SSDEEP
6144:/Ky6jgKvOOu13NBIjt2z8gMFprsy/7sFEoHaGwlJH9gF89tK52:yy6j/OOu13Q0z8gMF/oFEVT6ct
Malware Config
Extracted
redline
iNerinoEU
193.233.48.58:38989
-
auth_value
4536d7478dc495213e425f08d6e8e496
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06aa750e2aa74a1b400f885ecaa08746e4ce921d4435f7256ecc61c5b7f3e4a2.exe"C:\Users\Admin\AppData\Local\Temp\06aa750e2aa74a1b400f885ecaa08746e4ce921d4435f7256ecc61c5b7f3e4a2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
232KB
-
Filesize
244KB
-
Filesize
512KB
-
Filesize
216KB
-
Filesize
5.6MB
-
Filesize
208KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
184KB
-
Filesize
6.1MB
-
Filesize
72KB
-
Filesize
1.0MB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
1024KB
-
Filesize
232KB
-
Filesize
244KB