Analysis
-
max time kernel
303s -
max time network
326s -
platform
windows7_x64 -
resource
win7-20230824-en -
resource tags
arch:x64arch:x86image:win7-20230824-enlocale:en-usos:windows7-x64system -
submitted
28-08-2023 04:42
Behavioral task
behavioral1
Sample
s6907723.exe
Resource
win7-20230824-en
windows7-x64
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
s6907723.exe
Resource
win10-20230703-en
windows10-1703-x64
1 signatures
300 seconds
General
-
Target
s6907723.exe
-
Size
174KB
-
MD5
9fc223cd9ca4895e1e81d5490192f72d
-
SHA1
9585752d9b10d270c8f38e7332a71c92b824defe
-
SHA256
34f9ac4bf29f0255adedfabf70545e025a51f8cd4c4643a872b13607d4bdd394
-
SHA512
48115a22dd9ad628efdf4d72c96379b1985ae94f6231a92e8e2520758b9bb1274249d292e7c5584e8e910388264f7749d7323fb584b3c9bbc939b3f5c90722bb
-
SSDEEP
3072:itMMNILgWOI07QlEZO0pIAIH5uE0u3zAfbs9JN8e8hS:i2MyOI07QlE4uE0Wabs9L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
jaja
C2
77.91.124.73:19071
Attributes
-
auth_value
3670179d176ca399ed08e7914610b43c
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.