Analysis
-
max time kernel
289s -
max time network
303s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
-
submitted
07/08/2023, 04:24
General
-
Target
m7160099.exe
-
Size
174KB
-
MD5
82415c8bcbe86841e1e11d19bb416d62
-
SHA1
a8b9ac4e62c1686602f501aee929489c28b7fc77
-
SHA256
b09c45919fc7463dbe93b00425f63659fa8ceeb6f8311e187deaec318a64aca9
-
SHA512
bc309ea99b6da2a2930efce33acb6fbef2de9b214cb674f53e1d8e9907305aa4bb3241bbe1113b403f9eff56c627c3a4690be07bc15ce4c5ee8c5ae7fbfe3954
-
SSDEEP
3072:Ep+ZGv0jI0px5X4OCoYecFxUwsE0GzhXcroONJs8e8hc:y+pjI0px5X2bsE0acroONK
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
savin
C2
77.91.124.156:19071
Attributes
-
auth_value
a1a05b810428195ab7bb63b132ea0c8d
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\m7160099.exe"C:\Users\Admin\AppData\Local\Temp\m7160099.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
248KB
-
Filesize
300KB
-
Filesize
6.9MB
-
Filesize
64KB