Analysis
-
max time kernel
142s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/12/2023, 15:02
General
-
Target
493d3458e77a3eef4d8fb20cab6e3cd9.exe
-
Size
332KB
-
MD5
493d3458e77a3eef4d8fb20cab6e3cd9
-
SHA1
23def6243c2142b44de4a73a24de4e186f4929eb
-
SHA256
630249e0624415f6ab92fd59a4e2383868284bfc31b49a3b6980674c57f70663
-
SHA512
3926c346562d7959300e719232f2d7c4379c6fa5cd609b671f331453724af7a863f6d52f572ba65cdc9010d731a8cc4fc3e2c5e2243e52be41e379443bdc2129
-
SSDEEP
6144:yoxeQWHeUfxB4fjBZZzy5omD1WH99YuR36z53PYNiOju3Tgg+ou:ycc+MxB4Zzy5o/HbPJ6Ngg3Tgtb
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
paladin
C2
178.63.26.132:29795
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 3 IoCs
-
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
-
SectopRAT payload 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\493d3458e77a3eef4d8fb20cab6e3cd9.exe"C:\Users\Admin\AppData\Local\Temp\493d3458e77a3eef4d8fb20cab6e3cd9.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
268KB
-
Filesize
4.5MB
-
Filesize
216KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
256KB
-
Filesize
208KB
-
Filesize
256KB
-
Filesize
1024KB
-
Filesize
6.9MB
-
Filesize
256KB