Report - rev 0B744B7667EF335CB32CEA7A9E4FFC02.txt

RedLine stealer Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) Anti_VM OS Processor Check
ScreenShot
Created 2023.08.11 04:02 Machine s1_win7_x6401
Filename rev 0B744B7667EF335CB32CEA7A9E4FFC02.txt
Type data
AI Score Not founds Behavior Score
0.0
ZERO API file : clean
VT API (file)
md5 d355dd22f9d71b1b9bce9b03771c7f26
sha256 56c504a737ab28a59e8406e99bc5ef9d9ad54251cd34de44c47363896e2fe9e4
ssdeep 1572864:vN/bNnHSSLmyNHQgAb+k8m585ifjGVZ2dalm1offZb4UH+dsLeWQkDf6i/y6Dmsg:U
imphash
impfuzzy
  Network IP location

Signature (0cnts)

Level Description

Rules (6cnts)

Level Name Description Collection
danger RedLine_Stealer_b_Zero RedLine stealer binaries (upload)
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Admin_Tool_IN_Zero Admin Tool Sysinternals binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
notice anti_vm_detect Possibly employs anti-virtualization techniques binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure