Analysis
-
max time kernel
138s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 12:08
Behavioral task
behavioral1
Sample
0x0006000000023097-34.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x0006000000023097-34.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
0x0006000000023097-34.exe
-
Size
174KB
-
MD5
cd7de4ee3dfd325cbd735cd1d6721ba5
-
SHA1
d097acf7c9479964794eeb3fbb5bcfabb6c8cce7
-
SHA256
c180cc0dee4a19ba32b28386657ce8b28badc2b44f6265c49f52a37f74d3cd50
-
SHA512
7b0d8c35198b27c0786525b2eb1ba460e6d6136cac83fc459bcde5adf87c8a35ca917bf8a8b24ee57c095537906bbc763bfdcb610b79b8d8e08fb5416d306362
-
SSDEEP
3072:HmVenX0I0V916dOBCymtjvqE0WIkuvwJx8e8hN:Hmq0I0V9161DqE0Vvwn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
luate
C2
77.91.124.55:19071
Attributes
-
auth_value
e45cd419aba6c9d372088ffe5629308b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.