Analysis
-
max time kernel
289s -
max time network
303s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
-
submitted
11-07-2023 00:48
General
-
Target
l8465738.exe
-
Size
691KB
-
MD5
df4407eb1d1e6cdbe6072f6a6b5e00eb
-
SHA1
1c3ef1e4fb54b2be7a7c3ee8281a7b0059a04410
-
SHA256
9e7ed659ef37a747a9adcbe020b382ab679f24f845504cd054c766d388703d80
-
SHA512
a75a8a80250016344c48241cb44132c822b24bf91ddbbffc111990c6a1537dd245ba0ed7ce336476e93503a52b4f7159701ad05be203b9c4069fd9434e5394ca
-
SSDEEP
12288:Jw3zk2EgiICSVtg0wBW3iFt4ONq30/4St2NBd0JoLdaoi9Bbk:JwDkNgBbVTb34k30/8dRi9
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kira
C2
77.91.68.48:19071
Attributes
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\l8465738.exe"C:\Users\Admin\AppData\Local\Temp\l8465738.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
24KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
248KB
-
Filesize
300KB
-
Filesize
64KB
-
Filesize
64KB