Overview

overview

10

Static

static

dridex

windows10_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    22-10-2021 04:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    03f36ba5d0b98fab3b67c14041448b31ab255c6f73a9e04791a11af40be5bc0f.exe

  • Size

    358KB

  • MD5

    6b97022dc0cc733f792d7421938537e3

  • SHA1

    b4f1865392b942652fc678eb9e78bb5128bfb737

  • SHA256

    03f36ba5d0b98fab3b67c14041448b31ab255c6f73a9e04791a11af40be5bc0f

  • SHA512

    574342f62b7a7856e4128551a0129f55f859ae9cb924e8b9eba2ea454dff4ff1471e912815a8efa73c1513506750123f76d71d9534e02098d492a2126b14b465

Score
10/10
redlineutsinfostealer

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.182:52236

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine Payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\03f36ba5d0b98fab3b67c14041448b31ab255c6f73a9e04791a11af40be5bc0f.exe
    "C:\Users\Admin\AppData\Local\Temp\03f36ba5d0b98fab3b67c14041448b31ab255c6f73a9e04791a11af40be5bc0f.exe"
    1⤵
      PID:3020

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3020-116-0x00000000009F0000-0x0000000000A20000-memory.dmp
      Filesize

      192KB

      Download
    • memory/3020-117-0x0000000000400000-0x0000000000889000-memory.dmp
      Filesize

      4.5MB

      Download
    • memory/3020-118-0x0000000002590000-0x00000000025AF000-memory.dmp
      Filesize

      124KB

      Download
    • memory/3020-119-0x0000000005000000-0x0000000005001000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-120-0x0000000005002000-0x0000000005003000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-121-0x0000000005010000-0x0000000005011000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-122-0x00000000026A0000-0x00000000026BD000-memory.dmp
      Filesize

      116KB

      Download
    • memory/3020-123-0x0000000005510000-0x0000000005511000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-124-0x0000000004E60000-0x0000000004E61000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-125-0x0000000004E90000-0x0000000004E91000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-126-0x0000000005003000-0x0000000005004000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-127-0x0000000004FA0000-0x0000000004FA1000-memory.dmp
      Filesize

      4KB

      Download
    • memory/3020-128-0x0000000005004000-0x0000000005006000-memory.dmp
      Filesize

      8KB

      Download
    • memory/3020-129-0x0000000005B40000-0x0000000005B41000-memory.dmp
      Filesize

      4KB

      Download