Analysis
-
max time kernel
135s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
18-08-2023 16:36
Behavioral task
behavioral1
Sample
0x00060000000231f8-178.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x00060000000231f8-178.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0x00060000000231f8-178.exe
-
Size
173KB
-
MD5
c3c036c7578b7708b4858e1b78d2cf3c
-
SHA1
3fe30f43226dc6024be44cd788e22841a15693a4
-
SHA256
6b4b130db760a691e9ce01fa77984a666ca875e58fad98f31a5f16c78bcd8134
-
SHA512
47b6fe81c884ef3142f30cf873439186fe976acf6ec2fc078663fb9f4d9f0e9d8b31e2072d4c4606ce4b356e9ce8db8e0fd65d5415f6eb3c41a7b940a2eb155a
-
SSDEEP
3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
dugin
C2
77.91.124.73:19071
Attributes
-
auth_value
7c3e46e091100fd26a6076996d374c28
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.