Overview

overview

10

Static

static

dridex

windows10_x64

10

Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10_x64
  • resource
    win10-20220414-en
  • submitted
    27-06-2022 16:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d859824f4144d57a14036cb880368ee55d83faa253382d97e588bec9433ecc7f.exe

  • Size

    389KB

  • MD5

    acbad034961f67c43034edb3fb11046a

  • SHA1

    e9973a5038298d378da61d52783e37d4148f5ecc

  • SHA256

    d859824f4144d57a14036cb880368ee55d83faa253382d97e588bec9433ecc7f

  • SHA512

    615a31b025d534f8f4ea729fb1aa9d0b57a0062598fdf64276333b80ae5f4665a463d5138ce3c63b5989d3d659a2640add0c0710542aa5f04202c4664211d1ec

Score
10/10
redlineruzkiinfostealer

Malware Config

Extracted

Family

redline

Botnet

RUZKI

C2

193.106.191.246:23196

Attributes
  • auth_value

    121027c094f768a0a0e9b562f6417952

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d859824f4144d57a14036cb880368ee55d83faa253382d97e588bec9433ecc7f.exe
    "C:\Users\Admin\AppData\Local\Temp\d859824f4144d57a14036cb880368ee55d83faa253382d97e588bec9433ecc7f.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:2016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2016-117-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-118-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-119-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-120-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-121-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-122-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-123-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-124-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-125-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-126-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-127-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-128-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-129-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-130-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-131-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-132-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-133-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-134-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-135-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-136-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-137-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-138-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-139-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-140-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-141-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-142-0x0000000000D81000-0x0000000000DAB000-memory.dmp
    Filesize

    168KB

    Download
  • memory/2016-143-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-144-0x0000000000BD0000-0x0000000000D1A000-memory.dmp
    Filesize

    1.3MB

    Download
  • memory/2016-145-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-146-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-147-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-148-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-149-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-150-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-151-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-153-0x0000000000400000-0x0000000000B54000-memory.dmp
    Filesize

    7.3MB

    Download
  • memory/2016-152-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-154-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-155-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-156-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-157-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-158-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-159-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-160-0x0000000002A00000-0x0000000002A30000-memory.dmp
    Filesize

    192KB

    Download
  • memory/2016-161-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-162-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-163-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-164-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-165-0x00000000052B0000-0x00000000057AE000-memory.dmp
    Filesize

    5.0MB

    Download
  • memory/2016-166-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-167-0x0000000002A70000-0x0000000002A9E000-memory.dmp
    Filesize

    184KB

    Download
  • memory/2016-168-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-169-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-170-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-171-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-172-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-173-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-174-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-175-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-176-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-177-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-178-0x00000000057B0000-0x0000000005DB6000-memory.dmp
    Filesize

    6.0MB

    Download
  • memory/2016-179-0x0000000002C30000-0x0000000002C42000-memory.dmp
    Filesize

    72KB

    Download
  • memory/2016-180-0x0000000005DC0000-0x0000000005ECA000-memory.dmp
    Filesize

    1.0MB

    Download
  • memory/2016-181-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-182-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-183-0x0000000002DD0000-0x0000000002E0E000-memory.dmp
    Filesize

    248KB

    Download
  • memory/2016-184-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-185-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-186-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-187-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-188-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-189-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-190-0x0000000077CE0000-0x0000000077E6E000-memory.dmp
    Filesize

    1.6MB

    Download
  • memory/2016-191-0x0000000002E10000-0x0000000002E5B000-memory.dmp
    Filesize

    300KB

    Download
  • memory/2016-195-0x0000000000D81000-0x0000000000DAB000-memory.dmp
    Filesize

    168KB

    Download
  • memory/2016-197-0x0000000000BD0000-0x0000000000D1A000-memory.dmp
    Filesize

    1.3MB

    Download