Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
13-05-2024 07:51
General
-
Target
3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651.exe
-
Size
266KB
-
MD5
6545f1bc26cb43f4b8f6694ed82ce002
-
SHA1
f889aa07e40c0c30795948c106c1bf1d0e5cca72
-
SHA256
3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651
-
SHA512
835a6d370dee13fb9c4ef888ce52d8d527b42f87e46ff23712e987b29ab4a761620d9d97707a388bba593cffd0d5684ed7b3bd531475b3ff190d8471ecc30ba8
-
SSDEEP
6144:MY3/ZaVI/DhkEV89HhOcA++srKbqJSCnXjzegz54pdLnW9rAjD:MYvZxdk289H3PrKbqJSCnXjzegz54pdH
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
lux3
C2
176.123.9.142:14845
Attributes
-
auth_value
e94dff9a76da90d6b000642c4a52574b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651.exe"C:\Users\Admin\AppData\Local\Temp\3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2100-1-0x00000000005E0000-0x0000000000610000-memory.dmpFilesize
192KB
-
memory/2100-4-0x0000000000401000-0x0000000000403000-memory.dmpFilesize
8KB
-
memory/2100-5-0x0000000000400000-0x0000000000443000-memory.dmpFilesize
268KB
-
memory/2100-6-0x0000000001EA0000-0x0000000001EA6000-memory.dmpFilesize
24KB