Analysis
-
max time kernel
133s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
30/08/2023, 09:24
General
-
Target
0x0005000000019bf3-58.exe
-
Size
175KB
-
MD5
d7664f7eb74bb9ff363eae163eaa0177
-
SHA1
f86d7988864df15eba6651c70429ce2913c5891c
-
SHA256
d3e1bdec1ed827675cd2814412e2bcd0d15b9c09ce42983c03dd26c16552d88b
-
SHA512
22bef8bf07f1656589b36be98576f919002fc799a7e97150f5b161440e2ffb9c6cb96709a926858efb5390ab7b5e2f9ef28738536660e259ac210b10abe1b7ba
-
SSDEEP
3072:1hg4vliHjI05aBkbOVCFlAsNN4E0sW+1QlQneUJE8e8hA:1C44jI05aBkF4E0KQlQneUC
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
sruta
C2
77.91.124.82:19071
Attributes
-
auth_value
c556edcd49703319eca74247de20c236
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0005000000019bf3-58.exe"C:\Users\Admin\AppData\Local\Temp\0x0005000000019bf3-58.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB