Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
18/05/2023, 08:18
General
-
Target
0x00070000000126ea-116.exe
-
Size
145KB
-
MD5
3141fbb184abde1ed95f6a319733328a
-
SHA1
51f5feda85e31aaeeb82c099feafacf03e4625b9
-
SHA256
9555886b4412207ea48119cf6c346dbe48ee26c1da4bf18b7a5cc7f8cc82dacf
-
SHA512
915c6451ae1b52a2c3f80f91727b502ce7093958a02fc5dde1d197fd89d54259519cfad853c2ddc8cac09b9d86329bc70ea8002e0624d9fe0c578ec7e65801d9
-
SSDEEP
3072:4V+m5cvQmRSNP3qemJ7BvoOJ0hyZ98e8hm:4jGqMd0hyX
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
dusor
C2
185.161.248.25:4132
Attributes
-
auth_value
b81217cf5a516122d407aeaf79d22948
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00070000000126ea-116.exe"C:\Users\Admin\AppData\Local\Temp\0x00070000000126ea-116.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
256KB
-
Filesize
256KB