Analysis
-
max time kernel
289s -
max time network
308s -
platform
windows10-1703_x64 -
resource
win10-20230703-en -
resource tags
-
submitted
25-08-2023 04:36
General
-
Target
i4979950.exe
-
Size
174KB
-
MD5
f9d179e36c91569da56e618fb680f799
-
SHA1
c6310e7d99c81813565b0d9ffe67f15bcae2f481
-
SHA256
ba85441a41a1f143b11d7fe5e966fcf143ab9731369baaa44024df727b03d122
-
SHA512
6d33abc7ad918f9fb82703aed09e56ae70f7fe8b84b0bd721f83e16f61346fa79cc538ca4c0b76ffd3811793c18f54a45626c4c3347e856929e02d1d0a9214b5
-
SSDEEP
3072:0AD3SyJcI0L/oNdOIrBQZqkoj6tLEE0C/QZ4FkJJd8e8hU:0AD/cI0L/oNmqkoCLEE014FkJ7
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
vaga
C2
77.91.124.73:19071
Attributes
-
auth_value
393905212ded984248e8e000e612d4fe
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\i4979950.exe"C:\Users\Admin\AppData\Local\Temp\i4979950.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
6.0MB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
248KB
-
Filesize
300KB
-
Filesize
6.9MB
-
Filesize
64KB