Analysis
-
max time kernel
150s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
22/12/2023, 05:01
General
-
Target
6c9181d481ab78ee3cf56c069551563c.exe
-
Size
291KB
-
MD5
6c9181d481ab78ee3cf56c069551563c
-
SHA1
3a70cc55659b33eef02c8f44b682abde3be4b6d2
-
SHA256
3d093c9da1b967604c41c0795e3d633be09156813d2afe8aa8b1a0e9ebcbcd84
-
SHA512
20618c1588a0c2b671773b13662c211af9f799e9d2b711b27af73c4350acc44670479e8521592094ff5ef5b539c3579dc21ef8e2c52b9bdce3e0a90b1f5f7480
-
SSDEEP
6144:kP77LSdZj6XEoh9jx3Wf9+qSr9nRaWLpyy5IEqMGd7TuK:kP77ub60ojjFWf9ZSr9zH547T
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
test
C2
193.56.146.78:51487
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 4 IoCs
-
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
-
SectopRAT payload 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6c9181d481ab78ee3cf56c069551563c.exe"C:\Users\Admin\AppData\Local\Temp\6c9181d481ab78ee3cf56c069551563c.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1024KB
-
Filesize
192KB
-
Filesize
29.4MB
-
Filesize
256KB
-
Filesize
144KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
136KB
-
Filesize
256KB
-
Filesize
192KB
-
Filesize
1024KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB