Overview

overview

10

Static

static

10

1336-55-0x...ry.exe

windows7_x64

10

1336-55-0x...ry.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    139s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    22-06-2022 06:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1336-55-0x0000000000A60000-0x0000000000A80000-memory.exe

  • Size

    128KB

  • MD5

    44f5a11de3059301102a8f8463a50396

  • SHA1

    6f351a2ea810a85bef7970aca729473c8bc52b59

  • SHA256

    3ea3a1afd840c994e3da1e6300430671a8c5a8c4048b3370d4d77e48d7593f2b

  • SHA512

    edc1288cf2132d20e2fd78d9ebdad6867437cb5e2d08498ccdc9054c7b442f305b426719381f0c02833f6a9abea1668bb8b4705a238aff4c9b5a69be92bfc108

Score
10/10
redline76infostealer

Malware Config

Extracted

Family

redline

Botnet

76

C2

139.99.32.83:43199

Attributes
  • auth_value

    44d461325298129ed3c705440f57962c

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine Payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1336-55-0x0000000000A60000-0x0000000000A80000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1336-55-0x0000000000A60000-0x0000000000A80000-memory.exe"
    1⤵
      PID:4532

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4532-130-0x0000000000190000-0x00000000001B0000-memory.dmp
      Filesize

      128KB

      Download
    • memory/4532-131-0x00000000050C0000-0x00000000056D8000-memory.dmp
      Filesize

      6.1MB

      Download
    • memory/4532-132-0x0000000004B20000-0x0000000004B32000-memory.dmp
      Filesize

      72KB

      Download
    • memory/4532-133-0x0000000004C50000-0x0000000004D5A000-memory.dmp
      Filesize

      1.0MB

      Download
    • memory/4532-134-0x0000000004B80000-0x0000000004BBC000-memory.dmp
      Filesize

      240KB

      Download