Analysis
-
max time kernel
151s -
max time network
161s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
15/10/2023, 15:49
General
-
Target
0x00060000000231fa-82.exe
-
Size
222KB
-
MD5
64c63ef6803e340bf7a7b50f0fc46df0
-
SHA1
e11b004499dd7497107d2f3828b574db6b927155
-
SHA256
42ab4944a44d55ac19d7d4661cf72084a873b0ddbde7070160eab9bc31d3f369
-
SHA512
673c57a1dc04bbd9e2780233407027c54ad656109f2c65053b4316a85491ee90e5d32bd17fa31b7a0106d6c683dd3dbe2f0ff6fe4a8b292b5aaedcbbb3852bef
-
SSDEEP
3072:yFyOHrnNNgchKkRm8pyUDv8ZTYllt/q0ePfm/lpvSLaeG:yFyOLNNgch5k80UDGYp/mPfmdJSLa
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
lutyr
C2
77.91.124.55:19071
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x00060000000231fa-82.exe"C:\Users\Admin\AppData\Local\Temp\0x00060000000231fa-82.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
248KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB