Analysis
-
max time kernel
137s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
06/10/2023, 12:23
General
-
Target
0x000600000002325841_JC.exe
-
Size
231KB
-
MD5
24b628ab509d68b4e77e063c5031af2e
-
SHA1
4fb8bac1cfecbdb1b0683811d4796689a11ba703
-
SHA256
1a9cdedb16773f0f6a9bbbb8ad3e776602cc32fedebababfc5a5a2a286475096
-
SHA512
158fb396e02659152be36d92d1b9f3b2995833f782c8771390e3f715da1ad3c6c51141cd619241cc8d29edc4a906db539992f2db9687a830651ce000fd4f8b3f
-
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
gigant
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x000600000002325841_JC.exe"C:\Users\Admin\AppData\Local\Temp\0x000600000002325841_JC.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB