Analysis
-
max time kernel
155s -
max time network
177s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
13/10/2023, 16:32
General
-
Target
NEAS.07eb5dd8b5ba47ed4d5a38e37b147030_JC.exe
-
Size
233KB
-
MD5
07eb5dd8b5ba47ed4d5a38e37b147030
-
SHA1
43ccfd81fa278b1f27340e78dc21c27bc0288789
-
SHA256
ec2a5f24c8c2a7cb28842098b10d8485a87baff38999e66db2e427a4708ed917
-
SHA512
4f6cce62aa3739fa53178ddeebde8fe3e51d38722d13176078372fac2cb8d3000711d73595fa8ebb9a983a65f85c6a064155b8ece968ec49cc2659dcc85ec237
-
SSDEEP
6144:IT9iGjZ+M23Xgf7bBE+gDHiMMYY8+BvD:IcGjIM23Qf7bBE+WiMMYY8+BvD
Score
10/10
Malware Config
Extracted
Family
redline
C2
5.42.65.101:40676
Attributes
-
auth_value
5ea5ff960adfcd6deb133457d13c18fe
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
Processes
-
C:\Users\Admin\AppData\Local\Temp\NEAS.07eb5dd8b5ba47ed4d5a38e37b147030_JC.exe"C:\Users\Admin\AppData\Local\Temp\NEAS.07eb5dd8b5ba47ed4d5a38e37b147030_JC.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB