Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-11-2024 05:47
General
-
Target
bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9caN.exe
-
Size
297KB
-
MD5
3a98007a4177c9c4be57fd1962329920
-
SHA1
fd2a9088d82d78034c9dece57a440fdbcb71182a
-
SHA256
bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9ca
-
SHA512
f0db80d6f89f8fe078c4af5f64af18a760329909483c085a92e65c17b94500a687728e8a5ebc7a92b3b376e5b62da6a2262301c3180e1d92b7269df51aba4ec2
-
SSDEEP
3072:cuo7MNgXUC+G0a4MK93QjaB03cEO9qaPZ6+8J8lkmlBn+E7S6qukXc3Sr:w7MAv+G0abK1B19nwklBn+EWHn
Malware Config
Extracted
redline
mango
193.233.20.28:4125
-
auth_value
ecf79d7f5227d998a3501c972d915d23
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9caN.exe"C:\Users\Admin\AppData\Local\Temp\bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9caN.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
312KB
-
Filesize
808KB
-
Filesize
808KB
-
Filesize
280KB
-
Filesize
272KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
248KB
-
Filesize
1024KB
-
Filesize
312KB