Analysis
-
max time kernel
141s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2023, 01:02
Behavioral task
behavioral1
Sample
0x0007000000015616-102.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0007000000015616-102.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
0x0007000000015616-102.exe
-
Size
174KB
-
MD5
e84442f55130409db5665e22fe5b8f3d
-
SHA1
3229e5b1fc2648004bba84728151b498aa499719
-
SHA256
95cd5ab439e435ae0c802b28686f9e6b46508698732cef7a250fb02aa2159efa
-
SHA512
d49c73824fd5411b6e0706e47d390d2fea0d5c2cc0dac36628f1d997d4bd1bcc68e21dd308749f7096b937f66de8228261deec12e4a3f9978a222addd726d11a
-
SSDEEP
3072:9SZeJjHB9I0U6o4uOpN2AKU0BIE00KmH5kGvJk8e8hU:9SZe79I0U6o4D0IE0I5kGvi
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
micky
C2
77.91.124.172:19071
Attributes
-
auth_value
748f3c67c004f4a994500f05127b4428
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.