Analysis
-
max time kernel
147s -
max time network
163s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 04:25
General
-
Target
c9e382aa05770fcfae20af145234097bf52469ac24555f6dbce8673fc04e6a5d.exe
-
Size
382KB
-
MD5
1d8ec00d7807550cc1e71a03579249d4
-
SHA1
bac6617c68a1edb7d5c656e0fbe92bad6c02d3c8
-
SHA256
c9e382aa05770fcfae20af145234097bf52469ac24555f6dbce8673fc04e6a5d
-
SHA512
64f44c2d2818862675ade3d6b231e2ad823205649d5f9cf7fdaafe0621cee27b2a9a47d39dc7044f8711ddee2448e432dad2491675a9bf7997b472bbfb949fa0
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UTS
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c9e382aa05770fcfae20af145234097bf52469ac24555f6dbce8673fc04e6a5d.exe"C:\Users\Admin\AppData\Local\Temp\c9e382aa05770fcfae20af145234097bf52469ac24555f6dbce8673fc04e6a5d.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
192KB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
41.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB