Resubmissions
20-10-2021 08:53
211020-ktqfqaggf6 10Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 08:53
Static task
static1
Behavioral task
behavioral1
Sample
1bf56558ad6a3280c5e933cfbb62449ec26348277562387504d2a728e6754ca7.exe
Resource
win10-en-20210920
windows10_x64
0 signatures
0 seconds
General
-
Target
1bf56558ad6a3280c5e933cfbb62449ec26348277562387504d2a728e6754ca7.exe
-
Size
406KB
-
MD5
2a173977e3c6b2a1c8d8ad0fa8587d32
-
SHA1
dd9e893a93f3a0eaef4db6acd4d11789d94d4dfb
-
SHA256
1bf56558ad6a3280c5e933cfbb62449ec26348277562387504d2a728e6754ca7
-
SHA512
7ce58fd41e8684a5f065115c73b40a3dd667bc0ec79c357b2457682d00f3e518277c4d26883d7071ee69804b06122ac78683c4f8c0af030dd744ab0513966ef9
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UTS
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes:
resource yara_rule behavioral1/memory/1812-117-0x0000000004B20000-0x0000000004B3F000-memory.dmp family_redline behavioral1/memory/1812-119-0x0000000004C20000-0x0000000004C3D000-memory.dmp family_redline