Analysis
-
max time kernel
146s -
max time network
147s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
20-10-2021 03:30
General
-
Target
c15b041d0d3bbc1a96626ed511d044d7545c264d7c739dbdf7810743639c14ca.exe
-
Size
382KB
-
MD5
7c4e7711d4422ccbb7ac8e20559fb2b7
-
SHA1
37bd46da3eb2dc9f3cf13188eb0e58352fbefcee
-
SHA256
c15b041d0d3bbc1a96626ed511d044d7545c264d7c739dbdf7810743639c14ca
-
SHA512
93fdb63085916ee6b494a2abb06183548b5b87546424a51c26c4dee18a470094b019c0ffa80f292ed924251ebe8c492e1971da0d861dab0b6d6674cb5ae21322
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UTS
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c15b041d0d3bbc1a96626ed511d044d7545c264d7c739dbdf7810743639c14ca.exe"C:\Users\Admin\AppData\Local\Temp\c15b041d0d3bbc1a96626ed511d044d7545c264d7c739dbdf7810743639c14ca.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
1.3MB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB