Analysis
-
max time kernel
133s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
19/07/2023, 19:18
General
-
Target
0x0032000000016256-118.exe
-
Size
172KB
-
MD5
f9134fe199fe40d3840de7c2d1cf7626
-
SHA1
71e84180ecc47673bba3756dc82831c8ca7703d8
-
SHA256
c185cbb3f086aa9438a168501878f157ee09772c206e1f696c156287ace76601
-
SHA512
c206352ac9174758c4ff6dbbd87db05ea2221b3f7fe10812f44ab82f04ff83f71003d1bd0c984bf42851411b67112d49a8500dc56fb0d156152b1f810b9eaef6
-
SSDEEP
3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
nasa
C2
77.91.68.68:19071
Attributes
-
auth_value
6da71218d8a9738ea3a9a78b5677589b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0032000000016256-118.exe"C:\Users\Admin\AppData\Local\Temp\0x0032000000016256-118.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB