Analysis
-
max time kernel
134s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
05/08/2023, 10:29
Behavioral task
behavioral1
Sample
0x0007000000016266-101.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0007000000016266-101.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
0x0007000000016266-101.exe
-
Size
175KB
-
MD5
c078cbf67d55cab8808668d02b9a1187
-
SHA1
2aa3754a3b1696bac9979f14fe0ed968c0d1156b
-
SHA256
e6c18c1dd0a42ec61ae2eaa80d03e4341ae6feabadb8dda2c51fcace8954836c
-
SHA512
cf4c6bd242aeb92c081c05014ef4581a1ead4561bd28fa7000c37f69c3f2e287d456adcb46208826ddc42f212f192d0c56888fa741fbeb2a6f68b080e0571425
-
SSDEEP
3072:9SZeJjHB9I0U6o4uOpN2AKU0BIE00KmH5kGvJk8e8hU:9SZe79I0U6o4D0IE0I5kGvi
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
micky
C2
77.91.124.172:19071
Attributes
-
auth_value
748f3c67c004f4a994500f05127b4428
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.