Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Analysis

  • max time kernel
    296s
  • max time network
    301s
  • platform
    windows10-1703_x64
  • resource
    win10-20220812-en
  • resource tags

    arch:x64arch:x86image:win10-20220812-enlocale:en-usos:windows10-1703-x64system
  • submitted
    10-11-2022 22:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8701f05be1c34c7b4272cee9f268a8fd0373579ed43d3d43265609358f72b0ee.exe

  • Size

    360KB

  • MD5

    8416f8c43b9315bb8e32bad187d9c45f

  • SHA1

    1cd1427dfe448408b0343f7c964623b21ec6405b

  • SHA256

    8701f05be1c34c7b4272cee9f268a8fd0373579ed43d3d43265609358f72b0ee

  • SHA512

    d7ee4f1a4c46469c107c20bd9a947fd5957adb97e188df5fa5455377c3ffa8539ceab123a069dd78e71dcaf6896739b682a3e1500faedfacbfa1b7c9d0eca248

  • SSDEEP

    6144:7DLUVDNfym3ZvbfVjZHBQfsN+PMjJrQoT8j78kAe8Xr8Ei7RXYWIZupaUfqlcUKg:7UNddbdjZHufDQ8x78kAe8Xr8Ei7RXYR

Score
10/10
redlineredlineinfostealer

Malware Config

Extracted

Family

redline

Botnet

REDLINE

C2

80.66.87.60:80

Attributes
  • auth_value

    0031c8881e219bb78b7e6bf19f4b67c1

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8701f05be1c34c7b4272cee9f268a8fd0373579ed43d3d43265609358f72b0ee.exe
    "C:\Users\Admin\AppData\Local\Temp\8701f05be1c34c7b4272cee9f268a8fd0373579ed43d3d43265609358f72b0ee.exe"
    1⤵
      PID:2692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2692-115-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-116-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-117-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-118-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-119-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-120-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-121-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-122-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-123-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-124-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-125-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-126-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-127-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-128-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-129-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-130-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-131-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-133-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-132-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-134-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-135-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-136-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-137-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-138-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-139-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-140-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-141-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-142-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-143-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-144-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-145-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-146-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-147-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-148-0x0000000000D70000-0x0000000000DD0000-memory.dmp
      Filesize

      384KB

      Download
    • memory/2692-149-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-150-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-151-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-152-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-153-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-154-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-155-0x0000000005640000-0x0000000005646000-memory.dmp
      Filesize

      24KB

      Download
    • memory/2692-156-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-157-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-158-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-159-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-160-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-161-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-162-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-163-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-164-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-165-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-166-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-167-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-168-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-169-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-170-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-171-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-172-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-173-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-174-0x000000000B290000-0x000000000B896000-memory.dmp
      Filesize

      6.0MB

      Download
    • memory/2692-175-0x000000000AE10000-0x000000000AF1A000-memory.dmp
      Filesize

      1.0MB

      Download
    • memory/2692-176-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-177-0x000000000AD40000-0x000000000AD52000-memory.dmp
      Filesize

      72KB

      Download
    • memory/2692-178-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-179-0x000000000ADA0000-0x000000000ADDE000-memory.dmp
      Filesize

      248KB

      Download
    • memory/2692-180-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-181-0x000000000AF20000-0x000000000AF6B000-memory.dmp
      Filesize

      300KB

      Download
    • memory/2692-182-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-183-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-184-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/2692-185-0x0000000077C70000-0x0000000077DFE000-memory.dmp
      Filesize

      1.6MB

      Download