Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
11-10-2023 03:01
General
-
Target
0x000600000002316c-161.exe
-
Size
168KB
-
MD5
08ff3d597c112cef0dacdf77e020d580
-
SHA1
693de4609e08f7626d05c78b848abefa2e83a0df
-
SHA256
c61e7f08640e7270f85e6f526f6f4d9ed9218df37c250d9fd59006ac3a895429
-
SHA512
418c4042d92057fbe2e2fb488632d59f64b4d6f3b50f5be89c35d713f9a4d6712094ef944404752df685cd177fe78376c12e8bd0cb00ac4b47d10c77a0cf4415
-
SSDEEP
1536:Gi3n6ICpqtqhVZCGWK5JPzz8WJ8surO5gbBvdATGqVIBWbug8DLTGqU584wYkk8X:Gikw038WSHI6BFRqVIgE3jU5h8e8hR
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
dusa
C2
83.97.73.127:19045
Attributes
-
auth_value
ee896466545fedf9de5406175fb82de5
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x000600000002316c-161.exe"C:\Users\Admin\AppData\Local\Temp\0x000600000002316c-161.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
184KB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB