Analysis
-
max time kernel
133s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
27/08/2023, 14:31
Behavioral task
behavioral1
Sample
0x0006000000016fce-57.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0006000000016fce-57.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
-
Target
0x0006000000016fce-57.exe
-
Size
174KB
-
MD5
2680a7d992803c5ae1f9d4a1a04b8bc7
-
SHA1
b1fa9b6432663ee90f780fddaf7856b7d969c4d6
-
SHA256
9e2933e5687934f38827041e5feb9fdf181ac959faf73748b2261fe64579fd42
-
SHA512
32d386c0dd69006af61dd48142db29f21023205122071c11bbb06923d0820c1db8b2e4c138b5523e6c6678936325668dd2af7b8514592f77a18698e357989065
-
SSDEEP
3072:itMMNILgWOI07QlEZO0pIAIH5uE0u3zAfbs9JN8e8hS:i2MyOI07QlE4uE0Wabs9L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
jaja
C2
77.91.124.73:19071
Attributes
-
auth_value
3670179d176ca399ed08e7914610b43c
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.