Analysis
-
max time kernel
137s -
max time network
163s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11/10/2023, 12:39
Behavioral task
behavioral1
Sample
0x00060000000230b1-34.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x00060000000230b1-34.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
-
Target
0x00060000000230b1-34.exe
-
Size
174KB
-
MD5
841e2323fa50262bcdbc4d2d47a89c05
-
SHA1
e752dd83a7910aec84628391a14ad35bc9f55354
-
SHA256
dc63808e121a0e5d20b42cff3ae15ae8e6ba8838983e5e01e8c3d24c4466b3ef
-
SHA512
b46007d273a2ecc7bfcb28e0b33f79aa0310bbba78866b9daceda13c0a97ce8b06a4526ae747e2285d52c7c300a405b764af8010222e8fa879c32e27966eccf9
-
SSDEEP
3072:Woj9HIGIWI0Nibw4Oav5jrhSIE0sfTj/+eJ18e8hl:WojaVWI0NibwCSIE0q7+eT
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
laura
C2
77.91.124.55:19071
Attributes
-
auth_value
2838557cbac30b7b63a6a25bf8cea013
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.