Analysis
-
max time kernel
146s -
max time network
149s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
20-10-2021 08:53
General
-
Target
56b2e6f75aa817d3d491b2a32391f4286c14f5f9d116b5cea45eedac83bb63db.exe
-
Size
406KB
-
MD5
2cbcd5bec09a17e55141b1f9c3f88f57
-
SHA1
5203b2f1836a5d7ec8edea69a14ff76c8f48420b
-
SHA256
56b2e6f75aa817d3d491b2a32391f4286c14f5f9d116b5cea45eedac83bb63db
-
SHA512
b00bfe975440882a29950f06d123db88f8e8386bbf50ed7e1b944c5bebed7e7b85f817c2972ea809ff7a4ef504fc15cec10dfa48c27c15339a504cc983fc21c6
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
PUB
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\56b2e6f75aa817d3d491b2a32391f4286c14f5f9d116b5cea45eedac83bb63db.exe"C:\Users\Admin\AppData\Local\Temp\56b2e6f75aa817d3d491b2a32391f4286c14f5f9d116b5cea45eedac83bb63db.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
192KB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB