Overview

overview

10

Static

static

10

0x00070000...19.exe

windows7-x64

10

0x00070000...19.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    18/05/2023, 15:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0x000700000001313e-119.exe

  • Size

    145KB

  • MD5

    fb6247f354bfeda6c4cbd079423baafb

  • SHA1

    49fe9403d935884a2ccb2f3a31adbd7df9b0cb07

  • SHA256

    9881d3f8852e7778857d746535542532490fe1ea028b39e92bc2b0886f9aed40

  • SHA512

    92bec3f3bd20121efd5eb1ea113ddb3281ea9cab0b68eb5d67519e1d722b1740387a9c324b28ec182e6cbe2ee7a6abdc2ed7bca6a4cbe03cd43151a93261d481

  • SSDEEP

    3072:FV+m5c/QmRSNAwMqLza9nDEFth2ZG8e8hR:Fj2FD0IQth2c

Score
10/10
redlinelunainfostealer

Malware Config

Extracted

Family

redline

Botnet

luna

C2

77.91.68.253:4138

Attributes
  • auth_value

    16dec8addb01db1c11c59667022ef7a2

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

Processes

  • C:\Users\Admin\AppData\Local\Temp\0x000700000001313e-119.exe
    "C:\Users\Admin\AppData\Local\Temp\0x000700000001313e-119.exe"
    1⤵
      PID:920

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/920-54-0x00000000002B0000-0x00000000002DA000-memory.dmp

            Filesize

            168KB

            Download

          • memory/920-55-0x0000000004F20000-0x0000000004F60000-memory.dmp

            Filesize

            256KB

            Download