Analysis
-
max time kernel
136s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
18/08/2023, 23:03
Behavioral task
behavioral1
Sample
0x000600000002326c-178.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x000600000002326c-178.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
0x000600000002326c-178.exe
-
Size
173KB
-
MD5
3cf3ec006e31b77ed7ee1ba2af0c2328
-
SHA1
2ebc9ddcf7752f3ab978b1309b710f18f35f2b27
-
SHA256
95a5ea6886dce468c3e2c2835e5ca83643f3000e19b7a00ff097468278fb016f
-
SHA512
3457012d433a748635479cc1a9bf22845003ab5d4eea60d99fdc1eaee6de65acc3f0eecbc29597823733635545576d9e7bdd76f9006838d5701a5707ccabb39d
-
SSDEEP
3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
dugin
C2
77.91.124.73:19071
Attributes
-
auth_value
7c3e46e091100fd26a6076996d374c28
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.