Analysis
-
max time kernel
143s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20230703-en -
resource tags
-
submitted
10/07/2023, 10:38
General
-
Target
2b12867b4bdec491aa8571953414d810.exe
-
Size
266KB
-
MD5
2b12867b4bdec491aa8571953414d810
-
SHA1
1f8694bc431fd5097100a66d93cc5e70fbb68947
-
SHA256
bab02fd6d3dbfc283b4f66cd461729bfe8e7bc1c284b3313f408012c2a47e075
-
SHA512
8d310f333b70165ecd254ecb9215f9583273474332ef7b441de7b42e23eef6bdf6952f9b81e73a925da49069e43aeb4f0a7329409b7c030d252eb950caea33e0
-
SSDEEP
3072:bSiu8+iOHMwew7+picM/tsVVct+Z7bYH9jqyo/QnfzKX+9MByRtq9Lxfx:bu8vOswD70VVctqoDo/QnfzKv2tq9L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kira
C2
77.91.68.48:19071
Attributes
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b12867b4bdec491aa8571953414d810.exe"C:\Users\Admin\AppData\Local\Temp\2b12867b4bdec491aa8571953414d810.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
256KB