Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 07:34
General
-
Target
f13598d7d4a3e47e9c1e86fd3c8da6ff8e7703ca07740632360eadacc46458f5.exe
-
Size
405KB
-
MD5
a7132676b1e3c739b3ed0010a9e14a96
-
SHA1
8890e50cdde3d920b253426d12699cd22442fec2
-
SHA256
f13598d7d4a3e47e9c1e86fd3c8da6ff8e7703ca07740632360eadacc46458f5
-
SHA512
2b5591cc7b87a5c6e2d95d4d5ff8eafd3dcb9c7ac0d7b6ea83682a4b1b71802ec965f0fb3dad58df4130836ed74e4150ec1bb168f3bc0499f5faefe334cd7e77
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
PUB
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f13598d7d4a3e47e9c1e86fd3c8da6ff8e7703ca07740632360eadacc46458f5.exe"C:\Users\Admin\AppData\Local\Temp\f13598d7d4a3e47e9c1e86fd3c8da6ff8e7703ca07740632360eadacc46458f5.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
41.7MB
-
Filesize
696KB
-
Filesize
4KB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB
-
Filesize
4KB