Analysis
- max time kernel
143s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
04/07/2023, 12:34
General
- Target file.exe
- Size 270KB
- Sample230704-prrm8aed9x
- SHA256 665a12c39806edc87811291d7c054ccd07ada0f7da775cf90b6473b2a4457586
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
lux3
C2
-
176.123.9.142:14845
Attributes
-
auth_value
e94dff9a76da90d6b000642c4a52574b
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4144-133-0x0000000002190000-0x00000000021C0000-memory.dmp
memory/4144-137-0x000000000A0D0000-0x000000000A6E8000-memory.dmp
memory/4144-138-0x000000000A750000-0x000000000A85A000-memory.dmp
memory/4144-139-0x000000000A880000-0x000000000A892000-memory.dmp
memory/4144-140-0x000000000A8A0000-0x000000000A8DC000-memory.dmp
memory/4144-141-0x0000000004C40000-0x0000000004C50000-memory.dmp
memory/4144-142-0x0000000004C40000-0x0000000004C50000-memory.dmp