redline | f79ae4bad0585178911ff9b281b1908a201d05f90ee3ed4771a1af33230d02c2

Analysis

max time kernel
133s
max time network
148s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
06-09-2023 19:22

Target

t2978361_JC.exe
Size

175KB
MD5

7b7c5af0b8abd9d86992e0eb52fc0422
SHA1

366fd11059b4b56ccd40574690990005aeaec4fa
SHA256

f79ae4bad0585178911ff9b281b1908a201d05f90ee3ed4771a1af33230d02c2
SHA512

843edca7bf1d313f734e5e29e22b5f24d3ea18d99c4758f8333e1ddbce280367f8159ff71573f2bc102566544f3315d4a61f94e728104e796074183ff0464b96
SSDEEP

3072:z+BDWfkwS/VcI0EMHiRONe9GT+qE0gRrOaQ9JY8e8h0:z0DWfCcI0EMHijqE0xaQ9e

Score

10^/10

Family

redline

Botnet

gena

77.91.124.82:19071

Attributes

RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
infostealer redline

C:\Users\Admin\AppData\Local\Temp\t2978361_JC.exe
"C:\Users\Admin\AppData\Local\Temp\t2978361_JC.exe"
1⤵
PID:2688

memory/2688-0-0x0000000000040000-0x0000000000070000-memory.dmp

Filesize
192KB

Download
memory/2688-1-0x0000000074180000-0x000000007486E000-memory.dmp

Filesize
6.9MB

Download
memory/2688-2-0x0000000000330000-0x0000000000336000-memory.dmp

Filesize
24KB

Download
memory/2688-3-0x0000000001E70000-0x0000000001EB0000-memory.dmp

Filesize
256KB

Download
memory/2688-4-0x0000000074180000-0x000000007486E000-memory.dmp

Filesize
6.9MB

Download
memory/2688-5-0x0000000001E70000-0x0000000001EB0000-memory.dmp

Filesize
256KB

Download