Analysis
-
max time kernel
142s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
03/09/2023, 08:48
Behavioral task
behavioral1
Sample
0x0009000000016d7b-101.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0009000000016d7b-101.exe
Resource
win10v2004-20230831-en
1 signatures
150 seconds
General
-
Target
0x0009000000016d7b-101.exe
-
Size
174KB
-
MD5
d14870ec8e73d1e684d13e2b4bdab25b
-
SHA1
f526fa278413dd7f9218342d539122cd290676e9
-
SHA256
721af05b10c5b4078867d6a1872a9ef321ab5750f44925b5f809f16932976070
-
SHA512
0fc31989e8d083b1a8bd637bf342dfcf7dab2b959e48122da6410c5e04dc3cf892da84a56e651f25bc7b70be2d937b6f520363ad0141b9a02306cac1b4726629
-
SSDEEP
3072:QFUgdzI5dkI0BHjt8sOpVQkeKQqE0yM358JB8e8hv:QFUgdukI0BHjt8SqE0JWX
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
narik
C2
77.91.124.82:19071
Attributes
-
auth_value
07924f5ef90576eb64faea857b8ba3e5
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.