Analysis
- max time kernel
130s - max time network
189s - platform
windows7_x64 - resource
win7v20210408 - submitted
03/10/2021, 12:30
General
- Target a36c888f47eceb950d47caa689236157.exe
- Size 390KB
- Sample211003-ppgp8sfdc8
- SHA256 0e9d1d4f8b96efb87286d412f960000dd9e7dfae4cfc659c9241b28f29f48dde
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
UTS
C2
-
45.9.20.20:13441
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a36c888f47eceb950d47caa689236157.exe"C:\Users\Admin\AppData\Local\Temp\a36c888f47eceb950d47caa689236157.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2016-59-0x00000000003D0000-0x00000000003EF000-memory.dmp
memory/2016-60-0x0000000001EF0000-0x0000000001F0E000-memory.dmp
memory/2016-61-0x0000000000220000-0x0000000000250000-memory.dmp
memory/2016-62-0x0000000000400000-0x000000000046E000-memory.dmp
memory/2016-63-0x0000000004871000-0x0000000004872000-memory.dmp
memory/2016-64-0x0000000004872000-0x0000000004873000-memory.dmp
memory/2016-65-0x0000000004873000-0x0000000004874000-memory.dmp
memory/2016-66-0x0000000004874000-0x0000000004876000-memory.dmp