Analysis
-
max time kernel
289s -
max time network
303s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
28-08-2023 04:41
General
-
Target
i3615382.exe
-
Size
175KB
-
MD5
749eafc6127cf515e18e9398ef3ed88d
-
SHA1
75f0c35515db4cbf03ce09bb544281537680093e
-
SHA256
2d208da9fe2c015505ae7dfe2f9992899cabac1eae39aecdda2941aa452eacdd
-
SHA512
dee45038c65a9a239f63a1e21f5fe868bdf7019cd9676b8789d088c490abcd83bb845ee93e4215f44ea3145de28edf65f54efa085b8eabe1dbfb408568885b54
-
SSDEEP
3072:itMMNILgWOI07QlEZO0pIAIH5uE0u3zAfbs9JN8e8hS:i2MyOI07QlE4uE0Wabs9L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
jaja
C2
77.91.124.73:19071
Attributes
-
auth_value
3670179d176ca399ed08e7914610b43c
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\i3615382.exe"C:\Users\Admin\AppData\Local\Temp\i3615382.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB