Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
21-11-2024 19:07
General
-
Target
5197def97c9d6e3f9c0e55f4a91a424ece5a89d4882a0d413a9260123010ec4c.exe
-
Size
425KB
-
MD5
867db3f60c59188cb4baf8a5aa399752
-
SHA1
64a62a163ef37dc75601aaa3a9b1459f6972ddd1
-
SHA256
5197def97c9d6e3f9c0e55f4a91a424ece5a89d4882a0d413a9260123010ec4c
-
SHA512
f9e6ab200331855e4686abe63cac501e6965fd4a80b26fbbeb70875500e9f0733187c5534e22309ef31cf8fc017f07cf1bd029dd2e093af57651349e8a015f45
-
SSDEEP
6144:UnBevYGqhRcp5ke929s5gGQJgRCe7e4nY9bTCn:+AYGqhap5ke97yoRfe4nqvO
Malware Config
Extracted
redline
LogsDiller Cloud (Telegram: @logsdillabot)
5.42.65.68:29093
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5197def97c9d6e3f9c0e55f4a91a424ece5a89d4882a0d413a9260123010ec4c.exe"C:\Users\Admin\AppData\Local\Temp\5197def97c9d6e3f9c0e55f4a91a424ece5a89d4882a0d413a9260123010ec4c.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
380KB
-
Filesize
1024KB
-
Filesize
392KB
-
Filesize
7.1MB
-
Filesize
352KB
-
Filesize
344KB
-
Filesize
1024KB
-
Filesize
380KB
-
Filesize
7.1MB
-
Filesize
392KB