Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
20-10-2021 08:51
General
-
Target
8e23d6a543606cc004c9c4a14fea107b96ecdb50f56d1872e5a9cc8b41fd5a85.exe
-
Size
407KB
-
MD5
b4a11d80144f0452cd30193b4349031b
-
SHA1
3f0ae1b13b55cdcf55cb8374385d4215a7ea10d8
-
SHA256
8e23d6a543606cc004c9c4a14fea107b96ecdb50f56d1872e5a9cc8b41fd5a85
-
SHA512
a67054934a1597abd00bd7ebac5c5c8e6f9cfdf340835c16d0b409d40d3e41d1be890a317b507cb451e1101b637c5932816a7eda4c3d60a311cb4ebb7944942e
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UDP
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e23d6a543606cc004c9c4a14fea107b96ecdb50f56d1872e5a9cc8b41fd5a85.exe"C:\Users\Admin\AppData\Local\Temp\8e23d6a543606cc004c9c4a14fea107b96ecdb50f56d1872e5a9cc8b41fd5a85.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
192KB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB