Analysis
-
max time kernel
147s -
max time network
162s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 02:31
General
-
Target
e97d2f77252f3efacd7332977e93203dcfc974c2c93661cb2d552e73cd5234cf.exe
-
Size
382KB
-
MD5
d464bc9a3e220d2405fc43a081531be1
-
SHA1
e4852e3d5411d54cf58383a5e6344045ca86a2a4
-
SHA256
e97d2f77252f3efacd7332977e93203dcfc974c2c93661cb2d552e73cd5234cf
-
SHA512
1e19132d699fb76b09266172dbd7f1a5cdb739e4c2e81bdbd02b04e098b6fcf5aa0fe7af104f76653bf19180d8cf51459ccd9c455d8a6d51f8370f63e86381ba
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UTS
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e97d2f77252f3efacd7332977e93203dcfc974c2c93661cb2d552e73cd5234cf.exe"C:\Users\Admin\AppData\Local\Temp\e97d2f77252f3efacd7332977e93203dcfc974c2c93661cb2d552e73cd5234cf.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
1.3MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
41.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB