Analysis
-
max time kernel
134s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
-
submitted
27-03-2023 17:36
General
-
Target
0x00080000000122f0-1062.exe
-
Size
175KB
-
MD5
54f4be01fbf32ac0ab8be1578830ea47
-
SHA1
0cc99e4c83aa7b134f9df15d15e68ba537acc58c
-
SHA256
05a2be7f07ccd90a58e585605edd88139ce81ed7af47dacb01e949d67aad42b5
-
SHA512
6fe0e77fd422906933142f00e3ac0d07d599c22c047d58638bdc62c4cb48f20ce7f43403b609d38f63c39c17a9042dc07ac6a2aa673771e4b6f140690eb9dddb
-
SSDEEP
3072:0xqZWXragQx+/QpeUyUwUeRH93h2jxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jM:KqZWQpeTnP3h
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
gong
C2
193.233.20.33:4125
Attributes
-
auth_value
16950897b83de3bba9e4de36f06a8c05
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00080000000122f0-1062.exe"C:\Users\Admin\AppData\Local\Temp\0x00080000000122f0-1062.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
200KB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
240KB
-
Filesize
64KB