Analysis
-
max time kernel
122s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
05-01-2025 23:43
General
-
Target
Redlinestealer2020-main (2).zip
-
Size
2.5MB
-
MD5
291c143340623d5ddd9895e3173970cf
-
SHA1
64603a6f1fa74412e91fa20688f213d13b1dff40
-
SHA256
0e486871aeddade1498c575341b53401d74af20bf4cf9103b8d1f9596d852673
-
SHA512
4a226b9ca9c86cedcb677830551207fb5e4fe54f1e0959e4dc97581c1375416934d9a61570ddc6a7fab7acce0ef8d9cb4251de69b70d8780891f4b8f109eb6c7
-
SSDEEP
49152:BZiaJLFXJVKGIub4kSAQOXJ6kVViwBE2x6eni8mZw7/8Z:BZiaJtJVKGckSUdhBE/eiXOU
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Program Files\7-Zip\7zFM.exe"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Redlinestealer2020-main (2).zip"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow