Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20220414-en - submitted
06/07/2022, 02:06
General
- Target 353b564e3ca3c1532c28a4ce9e3ca1a8.exe
- Size 107KB
- Sample220706-cjebpshdh3
- SHA256 01219e8918a7d225564744f3b84c417ebdee23639b18901ba2a9fe496c5e9ccd
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
100
C2
-
185.17.0.63:32327
Attributes
-
auth_value
8c479b82a6164e0a0f7d75dcff4b60b4
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
- RedLine Payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\353b564e3ca3c1532c28a4ce9e3ca1a8.exe"C:\Users\Admin\AppData\Local\Temp\353b564e3ca3c1532c28a4ce9e3ca1a8.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4124-130-0x0000000000740000-0x0000000000760000-memory.dmp
memory/4124-131-0x0000000005630000-0x0000000005C48000-memory.dmp
memory/4124-132-0x00000000050D0000-0x00000000050E2000-memory.dmp
memory/4124-133-0x0000000005200000-0x000000000530A000-memory.dmp
memory/4124-134-0x0000000005130000-0x000000000516C000-memory.dmp