Analysis
- max time kernel
134s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
10/07/2023, 14:13
General
- Target ba6033ec32f4421a2da2602e3d1293b6.exe
- Size 691KB
- Sample230710-rjfxvsba86
- SHA256 a693070fe4f7828104eb0cce096c9123ea34d9150011736bb5cb5ffed94b35d0
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
kira
C2
-
77.91.68.48:19071
Attributes
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ba6033ec32f4421a2da2602e3d1293b6.exe"C:\Users\Admin\AppData\Local\Temp\ba6033ec32f4421a2da2602e3d1293b6.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4568-133-0x00000000001C0000-0x00000000001F0000-memory.dmp
memory/4568-137-0x000000000A490000-0x000000000AAA8000-memory.dmp
memory/4568-138-0x0000000009EB0000-0x0000000009FBA000-memory.dmp
memory/4568-139-0x0000000009FF0000-0x000000000A002000-memory.dmp
memory/4568-140-0x00000000023E0000-0x00000000023F0000-memory.dmp
memory/4568-141-0x000000000A010000-0x000000000A04C000-memory.dmp
memory/4568-142-0x00000000023E0000-0x00000000023F0000-memory.dmp