Analysis
- max time kernel
28s - max time network
30s - platform
windows7_x64 - resource
win7-20230220-en - resource tags
- submitted
24/05/2023, 08:13
General
- Target file.exe
- Size 360KB
- Sample230524-j4earsbe36
- SHA256 d698ff2e1f16f44726ec9056282bb17e80a1303be426156e70063f440ff882fc
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
178.33.182.70:18918
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1388-55-0x00000000006A0000-0x00000000006D6000-memory.dmp
memory/1388-56-0x00000000022A0000-0x00000000022D4000-memory.dmp
memory/1388-58-0x00000000049E0000-0x0000000004A20000-memory.dmp
memory/1388-59-0x00000000049E0000-0x0000000004A20000-memory.dmp
memory/1388-57-0x0000000000250000-0x000000000028F000-memory.dmp
memory/1388-60-0x0000000000400000-0x00000000006A0000-memory.dmp