Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
20-10-2021 01:20
General
-
Target
3ea4de7026018e1250d2588dc2f0eb315738b6567080b23aa4fb273602ae8065.exe
-
Size
381KB
-
MD5
c5422258b8ee1a5d404b29de44bc9c13
-
SHA1
00cd135b9b0a3a19369daadbc8d8ce88695be339
-
SHA256
3ea4de7026018e1250d2588dc2f0eb315738b6567080b23aa4fb273602ae8065
-
SHA512
5fe60817d8249b008cd58c9e2692e7eb7213142aa110541f6cfb97002d651dff135e58b95ec41686856bf05d1f8142c64bb08491c1f2cfa82d3ab8ec66e351e2
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UTS
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3ea4de7026018e1250d2588dc2f0eb315738b6567080b23aa4fb273602ae8065.exe"C:\Users\Admin\AppData\Local\Temp\3ea4de7026018e1250d2588dc2f0eb315738b6567080b23aa4fb273602ae8065.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
192KB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB