Analysis
-
max time kernel
141s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
23-05-2023 16:44
General
-
Target
0x00080000000122fb-116.exe
-
Size
145KB
-
MD5
81b4ce702cfe9231935980fa6cfcabca
-
SHA1
59ad21dbeb6dde4fa71cad60a9a8a19813ab0c4e
-
SHA256
71e5016ad98692a5487ed71aaa0571aee8cf5a8d37d0150196a71813555d39c5
-
SHA512
ea465c329c0571e03727b18013afe922b6ffdb17a2ec2d97c4a7dc5de819031732bfacf947416757104cf721c2e79afbffafaa9d40fecf935ff2a33dd9435103
-
SSDEEP
3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
diza
C2
185.161.248.37:4138
Attributes
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00080000000122fb-116.exe"C:\Users\Admin\AppData\Local\Temp\0x00080000000122fb-116.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
256KB
-
Filesize
256KB