Analysis
-
max time kernel
151s -
max time network
160s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 01:20
Static task
static1
Behavioral task
behavioral1
Sample
66b51edc82160cda498431ff114cabf8c9bda8129e04bd8d3554748ca2d0d6c5.exe
Resource
win10-en-20210920
windows10_x64
0 signatures
0 seconds
General
-
Target
66b51edc82160cda498431ff114cabf8c9bda8129e04bd8d3554748ca2d0d6c5.exe
-
Size
382KB
-
MD5
096716699b91d63ce3a2799ac93bcbed
-
SHA1
b62a7006faf7fd5364386687c125295805c97c6c
-
SHA256
66b51edc82160cda498431ff114cabf8c9bda8129e04bd8d3554748ca2d0d6c5
-
SHA512
b1ef46ea54c119cd6f9bb1e66c31c8d87241021107d3af2881155d8daff76090960e6ab6c8a6ae498b98ecbaf293e2a59c3dc134605c1e17db8c8bd99c724f9f
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UDP
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1688-116-0x0000000004B50000-0x0000000004B6F000-memory.dmp family_redline behavioral1/memory/1688-123-0x0000000004FD0000-0x0000000004FED000-memory.dmp family_redline