Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
-
submitted
19-11-2024 18:02
General
-
Target
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe
-
Size
384KB
-
MD5
1854755adc1845a69cf0717877cbc860
-
SHA1
5d881498a0fff1845cc9c18278f47cdd2c15a43b
-
SHA256
83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066
-
SHA512
504530e52638c1984a02e7b2ccc8422c3bac6e8429f929918681504d8622d9a3e77a8a6a14ee76b352a8178b34b43e3c6a7c261bf3dc6bdb5a584f9b6e6f49eb
-
SSDEEP
6144:jhggEUu25E2ekhl3yMKPHYNj6OxhukRcFEz2cLON/HNN4T:jhggLu2TXyMKQ96OuSMN
Malware Config
Extracted
redline
boris
193.233.20.32:4125
-
auth_value
766b5bdf6dbefcf7ca223351952fc38f
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 35 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe"C:\Users\Admin\AppData\Local\Temp\83bf9b6342f1a1e0d9476c26154e9c4696899a994e2cf2581713971fb11c6066N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
300KB
-
Filesize
312KB
-
Filesize
280KB
-
Filesize
272KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
39.6MB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
252KB
-
Filesize
1024KB
-
Filesize
300KB
-
Filesize
312KB