Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10_x64 -
resource
win10-en-20211014 -
submitted
20-10-2021 09:44
General
-
Target
649b9a2b1f5f7e1fc1132ef020a2a367b3329f22f068797bafc885a4c0dd4446.exe
-
Size
405KB
-
MD5
8194d025536167b601d1ecc09090c38b
-
SHA1
4ed0d4eb34d5f93683d5761412cada74061f86e5
-
SHA256
649b9a2b1f5f7e1fc1132ef020a2a367b3329f22f068797bafc885a4c0dd4446
-
SHA512
5d205641ce6d0b72c0123116ef49c1ac639be9835cb97e53f3a7ec36768d37e57aec798e52d5a8403f48f702fb3cbe1fc2da2ab3705db372d60484374d31403d
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
PUB
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\649b9a2b1f5f7e1fc1132ef020a2a367b3329f22f068797bafc885a4c0dd4446.exe"C:\Users\Admin\AppData\Local\Temp\649b9a2b1f5f7e1fc1132ef020a2a367b3329f22f068797bafc885a4c0dd4446.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
1.3MB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB