Analysis
- max time kernel
139s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
10/07/2023, 13:28
General
- Target 193878735d171404f704d71e76366baf.exe
- Size 1.5MB
- Sample230710-qqnqlsaf89
- SHA256 2d46ab188cd5589cd3ad6587440919f3d2b592d501cd456f6d0bd4f4fac70a31
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
kira
C2
-
77.91.68.48:19071
Attributes
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\193878735d171404f704d71e76366baf.exe"C:\Users\Admin\AppData\Local\Temp\193878735d171404f704d71e76366baf.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/532-133-0x00000000001D0000-0x0000000000200000-memory.dmp
memory/532-137-0x000000000A6D0000-0x000000000ACE8000-memory.dmp
memory/532-138-0x000000000A0C0000-0x000000000A1CA000-memory.dmp
memory/532-139-0x000000000A200000-0x000000000A212000-memory.dmp
memory/532-140-0x000000000A220000-0x000000000A25C000-memory.dmp
memory/532-141-0x0000000004D20000-0x0000000004D30000-memory.dmp
memory/532-142-0x0000000004D20000-0x0000000004D30000-memory.dmp