Analysis
-
max time kernel
139s -
max time network
166s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12-10-2023 10:52
General
-
Target
h8768023.exe
-
Size
174KB
-
MD5
b6749d33678dc433c2b940c1c10d2ed6
-
SHA1
24d3e6fcadccf027f194e459d266c8b08db6681f
-
SHA256
5a74bc3572bee60d4efc113a7d3412f7e98a0df1873b1d5458b81fbf93041825
-
SHA512
5d2fd66129c8fc7f546f79913c969c8dcaab569eee0aec54964fe04c4f5d22b9babf70875574c0ee67f869b941681a6f1b6e97e73c512b6e35b5a6bfba8795d7
-
SSDEEP
3072:woA6n9303bII0/mFuYOxwVxca14aE0Ky75HligaJk8e8hi:woAm9WII0/mFuO14aE0hHligay
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
vasha
C2
77.91.124.82:19071
Attributes
-
auth_value
42fc61786274daca54d589b85a2c1954
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\h8768023.exe"C:\Users\Admin\AppData\Local\Temp\h8768023.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB