Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
18/08/2023, 19:32
General
-
Target
0x00060000000231cf-178.exe
-
Size
173KB
-
MD5
866b63c4e1cc956e8834e245e80147dd
-
SHA1
811ed17885eeeedee00834bba8ea030f23236373
-
SHA256
609e4985ef0d82792e1e9487fd5ad109a7d27a45f21244230b0ae2e1d109db82
-
SHA512
51b32480a931bdef2b60fb858ff3305089183038325fc67650a5ac5d2486580f7a27c5c2100b75ed4ebacd2a1e30ff6af30359492a0e4c2964d4713e987be259
-
SSDEEP
3072:eTS18qdsI0PBESjOvGew8Z88FQE02quBoeaTJ38e8hr:eTSfsI0PBESOZ88FQE0QoeaTR
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
dugin
C2
77.91.124.73:19071
Attributes
-
auth_value
7c3e46e091100fd26a6076996d374c28
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00060000000231cf-178.exe"C:\Users\Admin\AppData\Local\Temp\0x00060000000231cf-178.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
192KB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB