Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
06/06/2023, 15:47
Behavioral task
behavioral1
Sample
09572799.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
09572799.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
09572799.exe
-
Size
172KB
-
MD5
53c4a3de9132cc921afc70557f86c2a7
-
SHA1
2addba4aa1938320a4c22d48645011d04d593a28
-
SHA256
871f196d5b2196ac8294141e8dbe8c1f559137eb8ae14adb116e523b870e4520
-
SHA512
d42b34aa0c0d01353002fee81f81b370ef8456da0cd33c6d1a5266362207874428448014b8149bdf64475261b8f0dc9028386c35229fc79e0b9a120e14e641e4
-
SSDEEP
3072:OPgUSkUOr8T/nMxN1UpgBbH1dP1Aj8e8hA:YnqameH1dP1Aj
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
lupa
C2
83.97.73.126:19048
Attributes
-
auth_value
6a764aa41830c77712442516d143bc9c
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.