Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 07:30
General
-
Target
c44d88d5b2ae29c7fa99a4ab2f8585cbff3c0c73ca6d75bfb42aae921f94f174.exe
-
Size
405KB
-
MD5
12a3405ffc53d5c2442e6f129a42299e
-
SHA1
f6c391f041769bce5b7d0f6da559e74590f7a402
-
SHA256
c44d88d5b2ae29c7fa99a4ab2f8585cbff3c0c73ca6d75bfb42aae921f94f174
-
SHA512
908f49bd4fad94bcb38630f4c8fe6e3a2c5d90d8b40fcc0f9ee938dde2ebfdb9adfac6618d9b18aee295543a787fa5c210e1c1b64065a4af2ded0590634d73f5
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UTS
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c44d88d5b2ae29c7fa99a4ab2f8585cbff3c0c73ca6d75bfb42aae921f94f174.exe"C:\Users\Admin\AppData\Local\Temp\c44d88d5b2ae29c7fa99a4ab2f8585cbff3c0c73ca6d75bfb42aae921f94f174.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
192KB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB