Analysis
-
max time kernel
292s -
max time network
307s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
13-10-2023 06:14
General
-
Target
2Mm368BM.exe
-
Size
221KB
-
MD5
826a37c18521d00fd8663aedb2c0072a
-
SHA1
3ae423041a522f9b53be3dd487eacd62c15d0bcf
-
SHA256
5f5cb4163545b829d92e2bd9183c9bd80716569d885d6596e08554387c530263
-
SHA512
5fb75d17c767b62ec77eef2298e0093e2dbd360e74a2c3922a362d0a1b24650235e6d55090fa52c1b6595bae50ebb391f02a3a67937ea00a1b7bdbfedb8e55a3
-
SSDEEP
3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kukish
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2Mm368BM.exe"C:\Users\Admin\AppData\Local\Temp\2Mm368BM.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB