Analysis
-
max time kernel
4294194s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20220310-en -
submitted
25-03-2022 07:24
Behavioral task
behavioral1
Sample
5582_1647892436_8862.exe
Resource
win7-20220310-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
5582_1647892436_8862.exe
Resource
win10v2004-20220310-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
5582_1647892436_8862.exe
-
Size
172KB
-
MD5
bbc9b2e32cd420063e28f97a2c0120e5
-
SHA1
0e8253c7f0d1d82ad299e3301b12f649c7074297
-
SHA256
b7a2b920675c8bef9335ba279317eb15ddfa6961feccc08c1a99e3d2ff8e34c1
-
SHA512
2e8bf7d5dc406f2b0afd67e2a35805307da8930ace805ceeaff67b33258f2849decdaa59a48e9af9ac66d97803b1d27179e8c803ef86c63864e1aac418759581
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
1
C2
20.53.13.165:3335
Attributes
-
auth_value
7ed907c60301a0aea12a58314db264f5
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload 1 IoCs
Processes:
resource yara_rule behavioral1/memory/1524-54-0x0000000000D80000-0x0000000000DB0000-memory.dmp family_redline
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1524-54-0x0000000000D80000-0x0000000000DB0000-memory.dmpFilesize
192KB