Analysis
-
max time kernel
146s -
max time network
161s -
platform
windows10_x64 -
resource
win10-en-20210920 -
submitted
20-10-2021 18:50
General
-
Target
abe161ed25ba8d823a09928988972706d2c6f3de23d0d8e6b87d8d302d6a514a.exe
-
Size
415KB
-
MD5
01fa0f567bff51112a6af8ad4042e1ea
-
SHA1
1d02a344482be9c44d52bcdfaa15a130a439d459
-
SHA256
abe161ed25ba8d823a09928988972706d2c6f3de23d0d8e6b87d8d302d6a514a
-
SHA512
0450e86edb99e1266a5b2add042cc29c7e1a586ede1f54f557f317a88d63a77ae87e45274c35225607e82e1430ff63b30a8828622cb3756587e0132ee2790a65
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
UDP
C2
45.9.20.182:52236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\abe161ed25ba8d823a09928988972706d2c6f3de23d0d8e6b87d8d302d6a514a.exe"C:\Users\Admin\AppData\Local\Temp\abe161ed25ba8d823a09928988972706d2c6f3de23d0d8e6b87d8d302d6a514a.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
124KB
-
Filesize
192KB
-
Filesize
41.7MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
116KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
8KB
-
Filesize
4KB