Analysis
-
max time kernel
143s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
24/05/2023, 01:30
General
-
Target
0x00070000000139eb-116.exe
-
Size
145KB
-
MD5
1f6a91c69356da7cb984b1ac7980fcf7
-
SHA1
2e7b75d0f7c5b8f72e187b41f468975c5f4f1d34
-
SHA256
5533a5d46239012388a2f35b5cb2fcd393da8fa3ab9b723f999631c54163f238
-
SHA512
2a2311ed150807813683a9a63c77633d1cab5f9dc465d0fb365b88bbb27eb25081e5e240d29a3bae3ab5cbf08f6c4e70bec9bb8e516894823bad15955b5b1460
-
SSDEEP
3072:vV+m5cVQmRSx9WCEkEhPW67V8BjVhtZN8e8ht:vj4oihwlVht3
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
diza
C2
185.161.248.37:4138
Attributes
-
auth_value
0d09b419c8bc967f91c68be4a17e92ee
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00070000000139eb-116.exe"C:\Users\Admin\AppData\Local\Temp\0x00070000000139eb-116.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
256KB
-
Filesize
256KB