Analysis
-
max time kernel
136s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
22/07/2023, 19:06
General
-
Target
0x0008000000018fb3-76.exe
-
Size
174KB
-
MD5
88902ec73df2239eb1b5444e9faca32e
-
SHA1
708b48c5f20fb8929510495b969f77cf7f990061
-
SHA256
d68f96f7972e2a8c02ed03bf9cb5bdba900bb7dde262eeddc9a31cd30722f3bf
-
SHA512
b88c8e41ffd91482882d22569af4c86302e483ccc0cc0f1931080c126a1794a6e2183880a153107911c28526782faf1fb5f59efa4cf5d32eb1a9ec9125084fe6
-
SSDEEP
3072:gciW+Zh8+WtcTIwxNm4/Lk/DWjAn8e8hJ:gciv7IJT/DWjAn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
nasa
C2
77.91.68.68:19071
Attributes
-
auth_value
6da71218d8a9738ea3a9a78b5677589b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0008000000018fb3-76.exe"C:\Users\Admin\AppData\Local\Temp\0x0008000000018fb3-76.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
192KB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB