Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
17/10/2022, 15:17
General
-
Target
InvoicePO45928.exe
-
Size
188KB
-
MD5
2f1588f52e75574ccdced95969b8f275
-
SHA1
d062bbdfb6a9f703281a6c5d6ccd762488f36de3
-
SHA256
89bb41d2fa9e316993c88cab5a820c6400033a1d217b81af1909c37d23cb8a39
-
SHA512
08c51c70a85ff8145ba71b4228c17b2bbfffbf37ecd9671e556f37ec7b89228064d744f84d1c36b1119e7c257318efbc9b95b8e4ae922076b103c77dc2cbcdca
-
SSDEEP
3072:jduZfyR69/Qg6qCjtVs/ThWDJWw4WWIdKeOSwmi/QJAdP:R0aR694Bq8tV8UDH7WId6SHiIu
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
17.9
C2
103.190.107.205:13122
Attributes
-
auth_value
8a5675c294df4427003eee21cdbd57ed
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\InvoicePO45928.exe"C:\Users\Admin\AppData\Local\Temp\InvoicePO45928.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
360KB
-
Filesize
24KB
-
Filesize
8KB