Analysis
-
max time kernel
135s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12-10-2023 17:14
General
-
Target
h9563774.exe
-
Size
174KB
-
MD5
246abffada26d9bb6f3444c7e8772d94
-
SHA1
9846e92b329e17fbb3f8c14ecf486c56467373fd
-
SHA256
b9681fd53d44a66034139375a182a7a704b4f31793727a868e7b0328817a2b19
-
SHA512
c0f5a2f7c0aeab9dc6b9324dff53ed8f89a94ef6ab8b6b79ae8fae53f89ea86172984f162a0ac045cbcecce5db1977600789d06cee9b265bfc3992df7191ae46
-
SSDEEP
3072:0GRk2OCSnBI0eVY+UxO5FY+bZHoGAxIcE0MLEXs08JYJw8e8hO:22EBI0eVVU0ZIGACcE0ot08JY2
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
petin
C2
77.91.124.82:19071
Attributes
-
auth_value
f6cf7a48c0291d1ef5a3440429827d6d
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\h9563774.exe"C:\Users\Admin\AppData\Local\Temp\h9563774.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
6.9MB
-
Filesize
24KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB