Analysis
-
max time kernel
137s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19-07-2023 15:03
General
-
Target
0x0007000000016cee-79.exe
-
Size
172KB
-
MD5
2c37b9d6ca82651a983b3c6f4452f058
-
SHA1
18334afa58e1db710f21403cebfc87c8fb4ed6a7
-
SHA256
67ee8d11ae7cb18e54501025e1a3d0faaabf267f59e59599fc76dce395395515
-
SHA512
204ac8b1a7c57003c1e26c76261c060d9f89885294bd369eb29231e1b7ab9544fa6a75c052723c69f0351ff1e83788b2e641b7fa82bf0498537fd4acca3e348c
-
SSDEEP
3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
nasa
C2
77.91.68.68:19071
Attributes
-
auth_value
6da71218d8a9738ea3a9a78b5677589b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0007000000016cee-79.exe"C:\Users\Admin\AppData\Local\Temp\0x0007000000016cee-79.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
192KB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB