Analysis
-
max time kernel
143s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11/10/2023, 12:30
Behavioral task
behavioral1
Sample
0x00060000000231e9-34.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x00060000000231e9-34.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
0x00060000000231e9-34.exe
-
Size
174KB
-
MD5
684d2a84282ca92a6ba60b3de73b595c
-
SHA1
93b304a309a0230e1d7afc8417592cb103929a0f
-
SHA256
ab6f65e19d76cbf98d88a32fe3920611cb49a6f5fdced263b5fe26b19496f568
-
SHA512
888dea33bf3d76b4ec91020634be1fb592ef45c89296322ede3c3979da793aa281fb4c2748ac707888c01c4a42f4a4954fa3014dc8890681e1a5be149766c6de
-
SSDEEP
3072:HmVenX0I0V916dOBCymtjvqE0WIkuvwJx8e8hN:Hmq0I0V9161DqE0Vvwn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
luate
C2
77.91.124.55:19071
Attributes
-
auth_value
e45cd419aba6c9d372088ffe5629308b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.