Overview

overview

10

Static

static

10

0x00080000...94.exe

windows7-x64

10

0x00080000...94.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07-03-2024 10:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0x00080000000122df-94.exe

  • Size

    145KB

  • MD5

    437800fe395632836e34711b671927f6

  • SHA1

    71c6badb2f0aa712bc2bc9f1c6456e8184c54672

  • SHA256

    fa6bca7d126952813e7909e9a97c7463da8cbb8e1f494249ff946c069e1f825e

  • SHA512

    53a5f3c9ff764e30fca6af33117a6e8809f2312730420d7aaf54a71496d77356bc090dd0f21bb7f3539ab2a0ecce937a7d5e3e761d72c80e1a0bb5f7282239a1

  • SSDEEP

    3072:6V+m5cDQmRSgEZtDMucQTzIXNnpjKhUZp8e8hQ:6j6M7csYNnFKhUz

Score
10/10
redlinemaxiinfostealer

Malware Config

Extracted

Family

redline

Botnet

maxi

C2

83.97.73.122:19062

Attributes
  • auth_value

    6a3f22e5f4209b056a3fd330dc71956a

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0x00080000000122df-94.exe
    "C:\Users\Admin\AppData\Local\Temp\0x00080000000122df-94.exe"
    1⤵
      PID:644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/644-0-0x0000000000D10000-0x0000000000D3A000-memory.dmp
      Filesize

      168KB

      Download
    • memory/644-1-0x0000000074EC0000-0x0000000075670000-memory.dmp
      Filesize

      7.7MB

      Download
    • memory/644-2-0x0000000005C10000-0x0000000006228000-memory.dmp
      Filesize

      6.1MB

      Download
    • memory/644-3-0x0000000005790000-0x000000000589A000-memory.dmp
      Filesize

      1.0MB

      Download
    • memory/644-5-0x0000000005A20000-0x0000000005A30000-memory.dmp
      Filesize

      64KB

      Download
    • memory/644-4-0x00000000056C0000-0x00000000056D2000-memory.dmp
      Filesize

      72KB

      Download
    • memory/644-6-0x0000000005720000-0x000000000575C000-memory.dmp
      Filesize

      240KB

      Download
    • memory/644-7-0x00000000058A0000-0x00000000058EC000-memory.dmp
      Filesize

      304KB

      Download
    • memory/644-8-0x0000000074EC0000-0x0000000075670000-memory.dmp
      Filesize

      7.7MB

      Download
    • memory/644-9-0x0000000005A20000-0x0000000005A30000-memory.dmp
      Filesize

      64KB

      Download