Overview

overview

10

Static

static

dridex

windows10_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10-en-20211014
  • submitted
    22-10-2021 19:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eb6764514118e4e36e14a42326b74ca55768847602694bf65ddd5a22c093593b.exe

  • Size

    407KB

  • MD5

    d96a577b92b13437932577e8d08d5163

  • SHA1

    cec3b036bb1c540e32291ac05220b738281fd4e0

  • SHA256

    eb6764514118e4e36e14a42326b74ca55768847602694bf65ddd5a22c093593b

  • SHA512

    374a22bce9d9d9426390a8ec42dbeb2214adce5f1a0b8ce3424c0b95e90062db27cb0e7975f71223a7eb9754b0629fdaebdc3f2a6de77fbd0e16a49c46179cc3

Score
10/10
redlinepubinfostealer

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine Payload 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\eb6764514118e4e36e14a42326b74ca55768847602694bf65ddd5a22c093593b.exe
    "C:\Users\Admin\AppData\Local\Temp\eb6764514118e4e36e14a42326b74ca55768847602694bf65ddd5a22c093593b.exe"
    1⤵
      PID:4304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4304-115-0x0000000000B26000-0x0000000000B49000-memory.dmp
      Filesize

      140KB

      Download
    • memory/4304-116-0x00000000009E0000-0x0000000000B2A000-memory.dmp
      Filesize

      1.3MB

      Download
    • memory/4304-117-0x0000000000400000-0x0000000000895000-memory.dmp
      Filesize

      4.6MB

      Download
    • memory/4304-118-0x0000000002A20000-0x0000000002A3F000-memory.dmp
      Filesize

      124KB

      Download
    • memory/4304-119-0x0000000002AD0000-0x0000000002AD1000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-120-0x0000000004F60000-0x0000000004F61000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-121-0x0000000002AB0000-0x0000000002ACD000-memory.dmp
      Filesize

      116KB

      Download
    • memory/4304-122-0x0000000005460000-0x0000000005461000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-123-0x0000000002AD2000-0x0000000002AD3000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-124-0x0000000002AD3000-0x0000000002AD4000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-125-0x0000000005AD0000-0x0000000005AD1000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-126-0x0000000005B00000-0x0000000005B01000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-127-0x0000000002AD4000-0x0000000002AD6000-memory.dmp
      Filesize

      8KB

      Download
    • memory/4304-128-0x0000000005C10000-0x0000000005C11000-memory.dmp
      Filesize

      4KB

      Download
    • memory/4304-129-0x0000000005C90000-0x0000000005C91000-memory.dmp
      Filesize

      4KB

      Download