Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
30/08/2023, 02:11
General
-
Target
b86eb5cd1d671fb8a6b7f3e20b64ab08.exe
-
Size
174KB
-
MD5
b86eb5cd1d671fb8a6b7f3e20b64ab08
-
SHA1
54cf76736cfb69d9191ad704d2174eb56862bbf7
-
SHA256
28cf048a73acba104186c47b87fbd835390578d6f58456123448be4df555170e
-
SHA512
d508c6109e7e7e9b48c82626b3d03c855aaa3601e47ede053ac18371c93c715070903d7c31f9522605ae8a7979a4b0eb18a0cbc639896d5450f2f2ceb0568ccd
-
SSDEEP
3072:KGX6GJpOzI0/n/KnaOAs9rzyQlOeE0E7UTtj2JB8e8hK:FX6/zI0/n/KnYCOeE0jtj2n
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
welos
C2
77.91.124.156:19071
Attributes
-
auth_value
9605367dc0a1f64eb2f71769fb518fcf
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b86eb5cd1d671fb8a6b7f3e20b64ab08.exe"C:\Users\Admin\AppData\Local\Temp\b86eb5cd1d671fb8a6b7f3e20b64ab08.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
7.7MB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
7.7MB
-
Filesize
64KB