Overview

overview

10

Static

static

10

0x00070000...78.exe

windows7-x64

10

0x00070000...78.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    147s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2023, 17:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0x000700000001424f-78.exe

  • Size

    145KB

  • MD5

    11e01f8f4048aa093e4a106b7ca4d98e

  • SHA1

    fb583b821c29db1b8256abee0dcb66c7275954b7

  • SHA256

    914348ea98c8ce1eec1d26cfc5684275d471a3652e0db5fbe8c3239af2006775

  • SHA512

    63e5648be7560792a4d840ad29182e122bcad81e598fa9ef23d42725067b5642cbffe02f3f579cb97713fdde363b8b3a40ad0f3b33f6809870736056d7dbebc3

  • SSDEEP

    3072:cV+m5c/QmRSNwIO1mn30DwaFehPZl8e8hu:cj20kDTehPP

Score
10/10
redlinedizainfostealer

Malware Config

Extracted

Family

redline

Botnet

diza

C2

83.97.73.122:19062

Attributes
  • auth_value

    0d09b419c8bc967f91c68be4a17e92ee

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

Processes

  • C:\Users\Admin\AppData\Local\Temp\0x000700000001424f-78.exe
    "C:\Users\Admin\AppData\Local\Temp\0x000700000001424f-78.exe"
    1⤵
      PID:1396

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1396-54-0x0000000000DF0000-0x0000000000E1A000-memory.dmp

            Filesize

            168KB

            Download

          • memory/1396-55-0x00000000043B0000-0x00000000043F0000-memory.dmp

            Filesize

            256KB

            Download

          • memory/1396-56-0x00000000043B0000-0x00000000043F0000-memory.dmp

            Filesize

            256KB

            Download