Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19-07-2023 21:59
General
-
Target
0x002e000000014bf1-94.exe
-
Size
173KB
-
MD5
d2c139b9404055c46938b2284a8d055c
-
SHA1
97e61929f30d479295f898b31da1d02c2061dbbd
-
SHA256
7c3b9277d763519314b0057e02e9eab74aa8dda72a97d6d85879ec34a71bdefe
-
SHA512
32bc5be53b4b149be240077c80d0386f8d4a2386dc8158717ce43fe0bfb30bff1ee2299d705f39337f8e3ec52d514153c961e610b9ddc5e329748c43e28df642
-
SSDEEP
3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
nasa
C2
77.91.68.68:19071
Attributes
-
auth_value
6da71218d8a9738ea3a9a78b5677589b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x002e000000014bf1-94.exe"C:\Users\Admin\AppData\Local\Temp\0x002e000000014bf1-94.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB