Analysis
-
max time kernel
133s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
03-09-2023 02:08
Behavioral task
behavioral1
Sample
0x0009000000016d10-101.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0009000000016d10-101.exe
Resource
win10v2004-20230831-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0x0009000000016d10-101.exe
-
Size
174KB
-
MD5
af6060c321428276a119225820287b5b
-
SHA1
f0f67476e88ca14bcb72db325a81aac6403b1dca
-
SHA256
92fd26f71bbc2c3edcecfd31f69ae631b152b99f90ada21b1e2a8e03ff061460
-
SHA512
1ccbeea610765c580c3e38263abfee1487219d6a751aebc409886248e98e0300246d534ce29093f51c5a90a0ad5c0b606ef8d79cc8cf3386559e69c494f6985c
-
SSDEEP
3072:QFUgdzI5dkI0BHjt8sOpVQkeKQqE0yM358JB8e8hv:QFUgdukI0BHjt8SqE0JWX
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
narik
C2
77.91.124.82:19071
Attributes
-
auth_value
07924f5ef90576eb64faea857b8ba3e5
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.