Analysis
-
max time kernel
146s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12/10/2023, 17:40
Behavioral task
behavioral1
Sample
0x000c0000000232b1-528.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0x000c0000000232b1-528.exe
Resource
win10v2004-20230915-en
2 signatures
150 seconds
General
-
Target
0x000c0000000232b1-528.exe
-
Size
221KB
-
MD5
bcc84b6ad506d30eca39d06be5290e86
-
SHA1
924fa33a97c7cafd8811365515d363b25abf7168
-
SHA256
72f62b7bb76b62907e6bdcf01feda44f54907c5ef7b6839a555d50f880fc29f3
-
SHA512
13e730b596821e7519f56184cc67fa8b685dcf78b38f38c4c5bac7ff41ffb32fb266be7f15e98f3187091a6a27bf16757ce5bce3ed305cb6fcb4cf0b5699b25c
-
SSDEEP
3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
lutyr
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
resource yara_rule behavioral1/memory/2076-1-0x0000000000E60000-0x0000000000E9E000-memory.dmp family_redline