Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
08/10/2023, 09:53
General
-
Target
0x000600000002329d-304.exe
-
Size
230KB
-
MD5
049c798b05d00c4d90b5d646d05ecd7e
-
SHA1
266eb150d6e08f72b41686d40157919a870f1ecb
-
SHA256
64b178cb07595289635c5428720ddf354290f0272ca36b4e25cc1d1039751f51
-
SHA512
3b8aeaf9e301e69a057443e70c02284e076f9e18286dbc4491655332136b0889eeb58da4972f0e3433bddb93b54154882b8f1413ff9ca9537fb6e93182d8fec6
-
SSDEEP
3072:sgspAnCNgcepupXKLh8DjV7OGt/qasDrTv+mIqd44oKG6g:jOACNgceQpXKLKdr/ODrTmmpd44oK
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
gigant
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x000600000002329d-304.exe"C:\Users\Admin\AppData\Local\Temp\0x000600000002329d-304.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
7.7MB
-
Filesize
64KB