Analysis
-
max time kernel
160s -
max time network
186s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
13-10-2023 13:00
General
-
Target
0x00060000000231e1-42.exe
-
Size
221KB
-
MD5
48b98215810e963d9c0fcea315859ee5
-
SHA1
e20af983092270931bed4546a5db7e7e7c564553
-
SHA256
878c02ddf98678e22b35554cdf6cfc8c7d9e1bbc46d3ae6c83c72e2613fb9834
-
SHA512
430d61b2d29fd99191a8fbf8d0c2e7f784d90e9a5bb57cd9ae1dc9e2b12a3b2283e64155a80e1e07d6ddd289ce9d0476cc27a402418a259f70de9920662b83c1
-
SSDEEP
3072:TtJXRMeZYncNgckxQdxCr1d2t/q5yoQVZL53pRzzXZQAZ:TJMeucNgckedxCDo/doQVZdZRzzXZQ
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kukish
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00060000000231e1-42.exe"C:\Users\Admin\AppData\Local\Temp\0x00060000000231e1-42.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB