Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230221-en -
resource tags
arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2023, 02:07
Behavioral task
behavioral1
Sample
0x00080000000122df-97.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x00080000000122df-97.exe
Resource
win10v2004-20230221-en
1 signatures
150 seconds
General
-
Target
0x00080000000122df-97.exe
-
Size
145KB
-
MD5
eb42aca6b0d111a7b4215e309fd46e9a
-
SHA1
21ccc1be6157fdebc1b19b74f8c600b47e1f2c3d
-
SHA256
70663c6acc3940055c40559dc5fa177fda040ab7ccd7370241fda1fc2877dac5
-
SHA512
c244efa5f55a399bc630f78cc34afa918af623c83bd07bc805a98a19b94e6542f49a5f7e4d2176524a83826b358d33db94a86605e6e968c217f0739aa92fe3b1
-
SSDEEP
3072:RV+m5c/QmRSNuUPxSwcuj/amKopEQg7bo3chvZ58e8hh:Rj201chvD
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
mura
C2
83.97.73.127:19062
Attributes
-
auth_value
b2ee4a66a20fb9e998d6a68277565331
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.