Analysis
-
max time kernel
131s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
06/03/2024, 22:20
General
-
Target
0x0008000000012317-117.exe
-
Size
145KB
-
MD5
150f4f0a083d5e4006a83d7170a84dd3
-
SHA1
c451bdb25704a8b97da0583863c1ea54517bba77
-
SHA256
8e6ebf921ea3d22bd2a8aa51f27ed5016eae0201e0388f4f438d76853eab1922
-
SHA512
dc62d2e34227d92d73af966bef81476c8c3de89c11f75d662738285e499e862d90017284837d7035758276f520839911375e47eaa808fc818514a4918f48e26c
-
SSDEEP
3072:XV+m5cvQmRSNzmEG/5iJRZGtbPhLZd8e8hb:XjGNB0KPhLn
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
ment
C2
185.161.248.25:4132
Attributes
-
auth_value
650f2fd9e43f18bed6e23c78d8cfb0af
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0x0008000000012317-117.exe"C:\Users\Admin\AppData\Local\Temp\0x0008000000012317-117.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
168KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB