Analysis
-
max time kernel
133s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
31-07-2023 21:53
Behavioral task
behavioral1
Sample
0x0007000000015c6b-101.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0007000000015c6b-101.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0x0007000000015c6b-101.exe
-
Size
173KB
-
MD5
6c2933cd31acf33dc34c0e6945537981
-
SHA1
8a7d0f08ec16a0c41b47ea21a79d412e9563dc28
-
SHA256
f0a1bbc519b546ba77292e686082893537acf36f2daab16a13c47f1011b20a77
-
SHA512
829fb5769415fd7630c33b4474cf53986d0ddb56bc610415822e33c765f82bd5f1ac1ec5a27891feab5441364bf6a0c5db099a79603244b200f3fc1c17d5f66b
-
SSDEEP
3072:Sdro6VLX9Y62FxNz6ryCt4Ec2DfQ8e8hW:Sd79f2dWytEc2DfQ
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
papik
C2
77.91.124.156:19071
Attributes
-
auth_value
325a615d8be5db8e2f7a4c2448fdac3a
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.