Analysis
-
max time kernel
146s -
max time network
161s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 13:40
General
-
Target
73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472.exe
-
Size
406KB
-
MD5
92ab32cdf89c33206734d0c247d38faa
-
SHA1
b599d40ddb3ea41606016db72ce8d6f9fb98bca4
-
SHA256
73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472
-
SHA512
8434ce86250abad3e8e80c3b550405780289d310c9608e64a9d0a6a07316409cf1f15d82fd3dbcdb51bd3b41cc9b6c05a34215565e3d5f16648ebc4d410db116
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UDP
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472.exe"C:\Users\Admin\AppData\Local\Temp\73c1f1e66a668ab6a9c8e6688574651bc6eb9f7716a08e25914cf8daef004472.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
1.3MB
-
Filesize
41.7MB
-
Filesize
124KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB