Analysis
-
max time kernel
110s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
14-11-2024 03:41
General
-
Target
46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648N.exe
-
Size
396KB
-
MD5
7b53ff7f53dcb48ccdf06ae4d22376c0
-
SHA1
3fc0ce1f06e64272f633643eef9962f08a70f15b
-
SHA256
46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648
-
SHA512
6052734674103fb6029c3b53d42997b8979e142c80f30e4054f07c6930f6c166afcc18d3dbbcbd186e1242ef295b121131fb8f45ff3aab47addc2c44f21d73f1
-
SSDEEP
6144:25ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ:25Ak/VUSH4Pd8UpL3jSCFdM3h
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648N.exe"C:\Users\Admin\AppData\Local\Temp\46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
300KB
-
Filesize
312KB
-
Filesize
280KB
-
Filesize
272KB
-
Filesize
39.1MB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
1024KB
-
Filesize
312KB