Analysis
-
max time kernel
133s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
06/10/2023, 06:07
General
-
Target
0x00070000000232d8-361.exe
-
Size
231KB
-
MD5
e0fee4683f5dc17ee7aa8994d2a4fa14
-
SHA1
67a7982ffd198be22ff537d7a66177fa17078cef
-
SHA256
db6dcbb2fe0e93ceb3441e08da97ea3954514f800c22240961ad106dde707492
-
SHA512
7f1ca0bd2b302e115f81c86c1f9daedf7a21e51289fc776124bbe87dc60eba5bd2a0e3c77625a116b758a3645346c086dd6f78153fbf69f8d8ca3c07024382d9
-
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
gigant
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00070000000232d8-361.exe"C:\Users\Admin\AppData\Local\Temp\0x00070000000232d8-361.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB