Analysis
- max time kernel
143s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
10/07/2023, 15:59
General
- Target 8d12f82b74b2b44f6be66ea315de17f4.exe
- Size 692KB
- Sample230710-te3beabh24
- SHA256 ff287555fbb01586cb85d90fd01fd368f5add3bfec916a1e4f929dd7d925f426
Score
10/10
Malware Config
Extracted
Family
-
redline
Botnet
-
kira
C2
-
77.91.68.48:19071
Attributes
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Signatures
- RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8d12f82b74b2b44f6be66ea315de17f4.exe"C:\Users\Admin\AppData\Local\Temp\8d12f82b74b2b44f6be66ea315de17f4.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3912-133-0x00000000001C0000-0x00000000001F0000-memory.dmp
memory/3912-137-0x0000000009FD0000-0x000000000A5E8000-memory.dmp
memory/3912-138-0x000000000A610000-0x000000000A71A000-memory.dmp
memory/3912-139-0x000000000A750000-0x000000000A762000-memory.dmp
memory/3912-140-0x0000000004B40000-0x0000000004B50000-memory.dmp
memory/3912-141-0x000000000A770000-0x000000000A7AC000-memory.dmp
memory/3912-142-0x0000000004B40000-0x0000000004B50000-memory.dmp