Overview

overview

10

Static

static

dridex

windows10_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    25-05-2022 09:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6c177357b2483e430a31ba16307a4f04f0eed7d0a5e0486817fe9f0b33bcd458.exe

  • Size

    379KB

  • MD5

    b28e3b0c474d1f8f369292dbac1d0f58

  • SHA1

    fc1a07d40a5bec6d87427fc10c1aede8cb659700

  • SHA256

    6c177357b2483e430a31ba16307a4f04f0eed7d0a5e0486817fe9f0b33bcd458

  • SHA512

    177af7143bd20a866ab1116b6251ff0675aaaa4a5a729d2a8ad48f38f5c109196e9331576ccc626889558c9ac2ead5d8d0c49bfe9044a7d5c0fe0e8216c6c923

Score
10/10
redlinetest1infostealer

Malware Config

Extracted

Family

redline

Botnet

test1

C2

185.215.113.75:80

Attributes
  • auth_value

    7ab4a4e2eae9eb7ae10f64f68df53bb3

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\6c177357b2483e430a31ba16307a4f04f0eed7d0a5e0486817fe9f0b33bcd458.exe
    "C:\Users\Admin\AppData\Local\Temp\6c177357b2483e430a31ba16307a4f04f0eed7d0a5e0486817fe9f0b33bcd458.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/668-118-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-119-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-120-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-121-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-122-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-123-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-124-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-126-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-127-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-128-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-129-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-130-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-131-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-132-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-133-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-134-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-135-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-136-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-137-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-138-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-139-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-140-0x00000000004B0000-0x000000000055E000-memory.dmp
    Filesize

    696KB

    Download
  • memory/668-141-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-143-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-142-0x0000000000720000-0x0000000000757000-memory.dmp
    Filesize

    220KB

    Download
  • memory/668-144-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-145-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-146-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-147-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-148-0x0000000000400000-0x00000000004A4000-memory.dmp
    Filesize

    656KB

    Download
  • memory/668-149-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-150-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-151-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-152-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-153-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-154-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-155-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-156-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-157-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-158-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-159-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-160-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-161-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-162-0x0000000002400000-0x0000000002430000-memory.dmp
    Filesize

    192KB

    Download
  • memory/668-163-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-164-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-165-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-166-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-167-0x0000000004AD0000-0x0000000004FCE000-memory.dmp
    Filesize

    5.0MB

    Download
  • memory/668-168-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-169-0x0000000002480000-0x00000000024AE000-memory.dmp
    Filesize

    184KB

    Download
  • memory/668-170-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-171-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-172-0x0000000004FD0000-0x00000000055D6000-memory.dmp
    Filesize

    6.0MB

    Download
  • memory/668-173-0x00000000055F0000-0x0000000005602000-memory.dmp
    Filesize

    72KB

    Download
  • memory/668-174-0x0000000005620000-0x000000000572A000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/668-175-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-176-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-177-0x0000000005730000-0x000000000576E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/668-178-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-179-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-180-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-181-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-182-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-183-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-184-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-185-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-186-0x00000000057C0000-0x000000000580B000-memory.dmp
    Filesize

    300KB

    Download
  • memory/668-187-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-188-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-189-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/668-190-0x0000000077450000-0x00000000775DE000-memory.dmp
    Filesize

    1.6MB

    Download