Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
-
submitted
16-07-2023 14:12
General
-
Target
777203924bfaa0cfdba942ae48b138ea54f92afe43a1f61051952a4cb04bff2f.exe
-
Size
493KB
-
MD5
5f5465df1faecf1c7540b4eb03943b4d
-
SHA1
5d1ed118d4dff415ece21990a8c46b2c280f3669
-
SHA256
777203924bfaa0cfdba942ae48b138ea54f92afe43a1f61051952a4cb04bff2f
-
SHA512
b6ddfec63b6d2381a69d9aaa5f87288abba105a1ee4816330ef21fe05dcb321b494adbec0873b1d78b40b159d7fb796281d11d61f2411c55c30513f6be2cacb8
-
SSDEEP
6144:xuEzOmFaxdLaHMXTvR9qrVmTgccSUin6w3Asc75/HuK4nY8XtvqqZ5FxDqHJ:xuEzDsXTLUE9cSUeN2uK4Li8PxDq
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kira
C2
77.91.68.48:19071
Attributes
-
auth_value
1677a40fd8997eb89377e1681911e9c6
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\777203924bfaa0cfdba942ae48b138ea54f92afe43a1f61051952a4cb04bff2f.exe"C:\Users\Admin\AppData\Local\Temp\777203924bfaa0cfdba942ae48b138ea54f92afe43a1f61051952a4cb04bff2f.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
508KB
-
Filesize
560KB
-
Filesize
6.9MB
-
Filesize
560KB
-
Filesize
4KB
-
Filesize
24KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
248KB
-
Filesize
300KB
-
Filesize
508KB
-
Filesize
6.9MB
-
Filesize
64KB