Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11-10-2023 11:31
General
-
Target
test_app_crypted.exe
-
Size
237KB
-
MD5
da6b23d9ae0d353284bf690c0a1b52e3
-
SHA1
bae61202e56933a3e473154c1217062832377dd0
-
SHA256
a46dc539214fc31a15868ee1e29521fe2ffe1e328d4fa1f4bdc8b57940db6d7e
-
SHA512
65bc955501dbf810b75f8c78d4940b5bf94b82ac9d6cc29e2157ec289acb3e4e71fded65e183177e4ead6afc7cf514797507c5031674d550817a54016e7aa91b
-
SSDEEP
6144:7RamXSrBX0QvY+HviNY+FpOLgoB12UuZEPKqRI/e9:FOr3vY+HvGTO8oB6qRI/
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
Dodik
C2
62.84.98.14:8599
Attributes
-
auth_value
377b3e8fd841293c888daf3412230c21
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\test_app_crypted.exe"C:\Users\Admin\AppData\Local\Temp\test_app_crypted.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
192KB
-
Filesize
7.7MB
-
Filesize
24KB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
240KB
-
Filesize
304KB
-
Filesize
7.7MB
-
Filesize
64KB