Analysis
-
max time kernel
140s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
11-11-2024 00:34
General
-
Target
65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe
-
Size
352KB
-
MD5
f425b13be6e3a3359d4287603a1e1d7a
-
SHA1
df7621b9d1388ab592da7621b9517ae6eb8e86b2
-
SHA256
1752ae70f16d983129d6902b71581d240ee6d607fc815f20e122d76ab49b86af
-
SHA512
a9babd05914dcd8c23f759b582e9c2b3cf9a94f2989579cdabe2877e15000592345c3daada4933cc09eeda154a26f05cafce2c6546344c147057b21986ee2bfe
-
SSDEEP
6144:NP5Z+5JiCnbBumrU6DfKm///w0XaSh4E+Ztkjte:NBZoJ3rU6RH/wjjGte
Malware Config
Extracted
redline
rosn
176.113.115.145:4125
-
auth_value
050a19e1db4d0024b0f23b37dcf961f4
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe"C:\Users\Admin\AppData\Local\Temp\65c1f126702c766ec504942d8d871ee7119f3f5143bb955455f6dec38735aaf5N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
312KB
-
Filesize
4.0MB
-
Filesize
4.0MB
-
Filesize
280KB
-
Filesize
272KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
1024KB
-
Filesize
312KB