Analysis
-
max time kernel
145s -
max time network
162s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
18-08-2023 14:05
Behavioral task
behavioral1
Sample
0x000600000002326e-178.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x000600000002326e-178.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0x000600000002326e-178.exe
-
Size
173KB
-
MD5
1436180fdf3d4b353c02b7f4aed239be
-
SHA1
eca14cf8921996abda6ab169e07fa526eceb4cef
-
SHA256
bf8ede30ba13f8170a964cefe9b1292109fe65efffe3bfe9bf805178a5bb53e8
-
SHA512
43f967db5b587dbe667f5854e74d7c76769cc8bb621d8f590b0ddc2221d746e32acba1df4d77cc5d16cf63f23da48d91d4d583a78d6c6c57775e75ab40a61022
-
SSDEEP
3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
dugin
C2
77.91.124.73:19071
Attributes
-
auth_value
7c3e46e091100fd26a6076996d374c28
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.