Overview

overview

10

Static

static

10

dridex

windows10_x64

10

Analysis

  • max time kernel
    146s
  • max time network
    148s
  • platform
    windows10_x64
  • resource
    win10-en-20211208
  • submitted
    28-01-2022 16:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b.exe

  • Size

    104KB

  • MD5

    5755bc64dcf918c4fe54a5d81e934836

  • SHA1

    812baee52cb616caf03d8e6cdb977dc36481dc56

  • SHA256

    5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b

  • SHA512

    306329d9da6e03bc0599bdb6b4f40942f7e36e0699fbb82dbb08be3091031655dba02caad956ddb8a54dbb3d993ee46833349cda16b9a7fd6ca2ea3eb4095097

Score
10/10
redline@mrshootertcp (1991827185) [ставка]infostealer

Malware Config

Extracted

Family

redline

Botnet

@MrShooterTCP (1991827185) [Ставка]

C2

91.243.59.52:1826

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine Payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b.exe
    "C:\Users\Admin\AppData\Local\Temp\5895d5ff150256b21fdbd62dc48b18e053753a754cec4b0efe4d016d5fe7d71b.exe"
    1⤵
      PID:2900

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2900-115-0x0000000000CE0000-0x0000000000D00000-memory.dmp
      Filesize

      128KB

      Download
    • memory/2900-116-0x0000000005BC0000-0x00000000061C6000-memory.dmp
      Filesize

      6.0MB

      Download
    • memory/2900-117-0x0000000005620000-0x0000000005632000-memory.dmp
      Filesize

      72KB

      Download
    • memory/2900-118-0x0000000005750000-0x000000000585A000-memory.dmp
      Filesize

      1.0MB

      Download
    • memory/2900-119-0x0000000005680000-0x00000000056BE000-memory.dmp
      Filesize

      248KB

      Download
    • memory/2900-120-0x00000000055B0000-0x0000000005BB6000-memory.dmp
      Filesize

      6.0MB

      Download
    • memory/2900-121-0x00000000056C0000-0x000000000570B000-memory.dmp
      Filesize

      300KB

      Download