redline | 745e358e9b0eefe2efe8d14cdbf17a194b81a80f929df4514cc3fed696d259ee

Analysis

max time kernel
297s
max time network
301s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
19-09-2023 06:51

Target

h3626941.exe
Size

174KB
MD5

43acc3d174d9c2da4013def25ed93107
SHA1

c0e91ed2ab5c607fc0b22c8f4209db792c26fa5f
SHA256

745e358e9b0eefe2efe8d14cdbf17a194b81a80f929df4514cc3fed696d259ee
SHA512

6ddecd71a2e5f9d6670f297513fe3db5e2ed4e859857d8a25a42dbcfe03e6d5f70762af836061a0ebfdfc05be6ca102d6b9116fe6e627a989811da07c59b9614
SSDEEP

3072:woA6n9303bII0/mFuYOxwVxca14aE0Ky75HligaJk8e8hi:woAm9WII0/mFuO14aE0hHligay

Score

10^/10

Family

redline

Botnet

vasha

77.91.124.82:19071

Attributes

RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
infostealer redline

C:\Users\Admin\AppData\Local\Temp\h3626941.exe
"C:\Users\Admin\AppData\Local\Temp\h3626941.exe"
PID:3056

memory/3056-0-0x0000000074760000-0x0000000074E4E000-memory.dmp

Filesize
6MB

Download
memory/3056-1-0x0000000000CC0000-0x0000000000CF0000-memory.dmp

Filesize
192KB

Download
memory/3056-2-0x0000000000200000-0x0000000000206000-memory.dmp

Filesize
24KB

Download
memory/3056-3-0x00000000047F0000-0x0000000004830000-memory.dmp

Filesize
256KB

Download
memory/3056-4-0x0000000074760000-0x0000000074E4E000-memory.dmp

Filesize
6MB

Download
memory/3056-5-0x00000000047F0000-0x0000000004830000-memory.dmp

Filesize
256KB

Download