Overview
overview
10Static
static
10Libraries/...52.dll
windows7-x64
1Libraries/...52.dll
windows10-2004-x64
1Libraries/GuiLib.dll
windows7-x64
1Libraries/GuiLib.dll
windows10-2004-x64
1Libraries/...UI.dll
windows7-x64
1Libraries/...UI.dll
windows10-2004-x64
1Libraries/...db.dll
windows7-x64
1Libraries/...db.dll
windows10-2004-x64
1Libraries/...db.dll
windows7-x64
1Libraries/...db.dll
windows10-2004-x64
1Libraries/...ks.dll
windows7-x64
1Libraries/...ks.dll
windows10-2004-x64
1Libraries/...il.dll
windows7-x64
1Libraries/...il.dll
windows10-2004-x64
1Libraries/...on.dll
windows7-x64
1Libraries/...on.dll
windows10-2004-x64
1Libraries/...ls.dll
windows7-x64
1Libraries/...ls.dll
windows10-2004-x64
1Libraries/...en.dll
windows7-x64
1Libraries/...en.dll
windows10-2004-x64
1Libraries/...ib.dll
windows7-x64
1Libraries/...ib.dll
windows10-2004-x64
1Libraries/builder.exe
windows7-x64
3Libraries/builder.exe
windows10-2004-x64
3Libraries/...et.dll
windows7-x64
1Libraries/...et.dll
windows10-2004-x64
1OpenPort.bat
windows7-x64
8OpenPort.bat
windows10-2004-x64
8RedLine.Ma...ed.exe
windows7-x64
3RedLine.Ma...ed.exe
windows10-2004-x64
3Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
07-12-2024 15:52
Behavioral task
behavioral1
Sample
Libraries/Bunifu_UI_v1.52.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Libraries/Bunifu_UI_v1.52.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Libraries/GuiLib.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Libraries/GuiLib.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Libraries/MetroSet UI.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Libraries/MetroSet UI.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Libraries/Mono.Cecil.Mdb.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Libraries/Mono.Cecil.Mdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Libraries/Mono.Cecil.Pdb.dll
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
Libraries/Mono.Cecil.Pdb.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Libraries/Mono.Cecil.Rocks.dll
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Libraries/Mono.Cecil.Rocks.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Libraries/Mono.Cecil.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Libraries/Mono.Cecil.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Libraries/Newtonsoft.Json.dll
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Libraries/Newtonsoft.Json.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Libraries/RedLine.SharedModels.dll
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
Libraries/RedLine.SharedModels.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Libraries/System.Drawing.Pen.dll
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
Libraries/System.Drawing.Pen.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Libraries/Vestris.ResourceLib.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Libraries/Vestris.ResourceLib.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Libraries/builder.exe
Resource
win7-20241010-en
Behavioral task
behavioral24
Sample
Libraries/builder.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Libraries/protobuf-net.dll
Resource
win7-20241023-en
Behavioral task
behavioral26
Sample
Libraries/protobuf-net.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
OpenPort.bat
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
OpenPort.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
RedLine.MainPanel-cracked.exe
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
RedLine.MainPanel-cracked.exe
Resource
win10v2004-20241007-en
General
-
Target
RedLine.MainPanel-cracked.exe
-
Size
668KB
-
MD5
628f7b5ea6bdab4fce2f684e925a6c58
-
SHA1
af4f1efc095641ca6aa1b104346364c95c454dd0
-
SHA256
6fb8a784ea49e2dfedad52a6f381c5936107cbafaef16d92361fb50ad7e13295
-
SHA512
45b2accb11b1da8337a88a1546043405a02599220d4731e15641f5c18ba622ddf5e306a8eaa286d429d1d7baa79e0af9f5fba50f65f0fa31266f518e241ec595
-
SSDEEP
12288:MXes/7Zk2HDnVn6eexZggOZDwV9KOZxOy+h5KBsMRkM4zXywybl95P:022HUbOZtpKJt
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language RedLine.MainPanel-cracked.exe