Analysis
-
max time kernel
143s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23/07/2023, 05:40
General
-
Target
0x0009000000016071-117.exe
-
Size
173KB
-
MD5
56e029b3eaec6be97c98c58db4d597db
-
SHA1
83a3a1d626e985aab30d317caf2529113d39d6be
-
SHA256
a5a26a5fc65bc0c806d1880e7da25a4fdae84cd00a0e11516cfc7822063c38ba
-
SHA512
23e2b6145a4afee2c3621822bd2fbf65ea39680eefd5802db07d562da93d24fd2a70f99d2046690c399c544dae656a895ad9fe9e1b2b988ce45c52f88bbb2c72
-
SSDEEP
3072:Wl9OplNDfkf9j0avxN0oRHJY8wWY8e8h7:a9OPNATkYY8wWY
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
grom
C2
77.91.68.68:19071
Attributes
-
auth_value
9ec3129bff410b89097d656d7abc33dc
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0009000000016071-117.exe"C:\Users\Admin\AppData\Local\Temp\0x0009000000016071-117.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
7.7MB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
7.7MB
-
Filesize
64KB