Analysis
-
max time kernel
289s -
max time network
303s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system -
submitted
07/08/2023, 04:24
Behavioral task
behavioral1
Sample
m7160099.exe
Resource
win7-20230712-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
m7160099.exe
Resource
win10-20230703-en
1 signatures
300 seconds
General
-
Target
m7160099.exe
-
Size
174KB
-
MD5
82415c8bcbe86841e1e11d19bb416d62
-
SHA1
a8b9ac4e62c1686602f501aee929489c28b7fc77
-
SHA256
b09c45919fc7463dbe93b00425f63659fa8ceeb6f8311e187deaec318a64aca9
-
SHA512
bc309ea99b6da2a2930efce33acb6fbef2de9b214cb674f53e1d8e9907305aa4bb3241bbe1113b403f9eff56c627c3a4690be07bc15ce4c5ee8c5ae7fbfe3954
-
SSDEEP
3072:Ep+ZGv0jI0px5X4OCoYecFxUwsE0GzhXcroONJs8e8hc:y+pjI0px5X2bsE0acroONK
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
savin
C2
77.91.124.156:19071
Attributes
-
auth_value
a1a05b810428195ab7bb63b132ea0c8d
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.