Overview

overview

10

Static

static

10

AppLaunch.exe

windows7-x64

10

AppLaunch.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    47s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 03:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    AppLaunch.exe

  • Size

    104KB

  • MD5

    006e7666628653086226ca1203d4db8f

  • SHA1

    ab37c0fb698f4d316260910f21f5a498bd359db1

  • SHA256

    b1b0137a9e18491dfae75e3921a47945a323486a6c9785ea050abcb2dc33e604

  • SHA512

    52afaa8181c53a2bd6db78bd97c38dea027c05214c1d841aab2ba274995c346bebf4f198c401af973b648ea8e856aba87ad1ad805fbdf91a79fb83fddbdfc072

  • SSDEEP

    1536:mh+zCvsP0XDcbYInTDEVgrj0y8WcWZWpVrR7lQSCbR2zbuMZEYCm+0wuei6ZLoD:rCvsP0XgUInt+SqVrR7l+eSrm+h/xP

Score
10/10
redlineinfostealer

Malware Config

Extracted

Family

redline

C2

1.2.3.4:5678

Attributes
  • auth_value

    8b8bd0cb6300e0dea786123a0853916a

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AppLaunch.exe
    "C:\Users\Admin\AppData\Local\Temp\AppLaunch.exe"
    1⤵
      PID:2428

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2428-0-0x000000007452E000-0x000000007452F000-memory.dmp
      Filesize

      4KB

      Download
    • memory/2428-1-0x00000000010D0000-0x00000000010F0000-memory.dmp
      Filesize

      128KB

      Download