Analysis
-
max time kernel
132s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
06/10/2023, 08:50
General
-
Target
0x000800000002326f-349.exe
-
Size
231KB
-
MD5
6f80abe5be0e517b154d7982d341be7c
-
SHA1
568acf31133ad6bac5889f60b60db0a5ceea42dc
-
SHA256
c01bb67d46d84ca9c45a0d2ff50c2bc9766811c55adb814dd274c6e200f593a0
-
SHA512
02b931db40fa739d0b6ac8026ae3dd61db970948105079c13ff4339a1ce69425ff713c02c2a5cc91c35c65895a34010e871e8aa0ae1da86e6cb461bc4ebc8a7c
-
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
gigant
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x000800000002326f-349.exe"C:\Users\Admin\AppData\Local\Temp\0x000800000002326f-349.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB