redline | c5a3dbeea17ddba50482e7844a817171580f977dcea9ad7b655d39a934b93b93

Analysis

max time kernel
147s
max time network
158s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 12:33 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe
Size

274KB
MD5

17c694e79f6d36c7ddf2d0826847af9c
SHA1

4a9ede0f5efe78a4807230fa8dc0ae4d9e6fd9e8
SHA256

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb
SHA512

bfe84a7d6a038df984e6d789c0169771a567488137d01b8df27b67706aca915fddb14d510dc9c654281b25a2e65cf5c57d009b16cd78a0170ee13dd70e12b363
SSDEEP

6144:SJhy0g57Kx1lgD0568wQ7tuMp2tHnAm9CMtM:SJhcx0568wbt

Score

10^/10

redline lux3 infostealer

Malware Config

Extracted

Family

redline

Botnet

lux3

176.123.9.142:14845

Attributes

auth_value
e94dff9a76da90d6b000642c4a52574b

Signatures

RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
infostealer redline

RedLine payload 2 IoCs

resource	yara_rule
behavioral23/memory/2212-2-0x0000000000220000-0x0000000000250000-memory.dmp	family_redline
behavioral23/memory/2212-5-0x0000000000400000-0x0000000000446000-memory.dmp	family_redline

C:\Users\Admin\AppData\Local\Temp\db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe
"C:\Users\Admin\AppData\Local\Temp\db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe"
1⤵
PID:2212

Network

No results found

176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3
176.123.9.142:14845

db14966ca75480a4e8f9f3d18c7bada2f205a1ac7404dbeda068279afa55b1cb.exe

152 B
120 B
3
3

No results found

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2212-0-0x0000000000401000-0x0000000000402000-memory.dmp

Filesize
4KB

Download
memory/2212-2-0x0000000000220000-0x0000000000250000-memory.dmp

Filesize
192KB

Download
memory/2212-5-0x0000000000400000-0x0000000000446000-memory.dmp

Filesize
280KB

Download
memory/2212-6-0x00000000004F0000-0x00000000004F6000-memory.dmp

Filesize
24KB

Download

Analysis

Sharing

General

Malware Config

Extracted

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.