Analysis
-
max time kernel
148s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 06:07
Behavioral task
behavioral1
Sample
0x000600000002320a-94.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x000600000002320a-94.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
0x000600000002320a-94.exe
-
Size
174KB
-
MD5
78b51b47850f067a8464fe517d321b90
-
SHA1
bc5f134917a39fe7f442bdc11f25362aae4429cf
-
SHA256
0690afcffa6ace408574cea07b4abd6209b955940a71ece19ba9f45bf81bd8fe
-
SHA512
697e1a655b27ef6af08d26e170bd166212ce3fe511098042524df1cca040b589eac90cc47d800e0f6e29ce374d8f3b40a6c1977f5bbde26c3efb535e29be0fb5
-
SSDEEP
3072:YQx3u/I3uI0qRjH/AUOzblVuQmHMOKE0s3CqFJU4JQ8e8hD:Y035uI0qRjH6mLKE0ZAJU42
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
luska
C2
77.91.124.55:19071
Attributes
-
auth_value
a6797888f51a88afbfd8854a79ac9357
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.