Analysis
-
max time kernel
143s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
13-05-2024 07:51
General
-
Target
3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651.exe
-
Size
266KB
-
MD5
6545f1bc26cb43f4b8f6694ed82ce002
-
SHA1
f889aa07e40c0c30795948c106c1bf1d0e5cca72
-
SHA256
3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651
-
SHA512
835a6d370dee13fb9c4ef888ce52d8d527b42f87e46ff23712e987b29ab4a761620d9d97707a388bba593cffd0d5684ed7b3bd531475b3ff190d8471ecc30ba8
-
SSDEEP
6144:MY3/ZaVI/DhkEV89HhOcA++srKbqJSCnXjzegz54pdLnW9rAjD:MYvZxdk289H3PrKbqJSCnXjzegz54pdH
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
lux3
C2
176.123.9.142:14845
Attributes
-
auth_value
e94dff9a76da90d6b000642c4a52574b
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651.exe"C:\Users\Admin\AppData\Local\Temp\3b67ac2053cfcb67f4034907cf81e72d93541e06f86ab3ac73130c4036c07651.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
8KB
-
Filesize
268KB
-
Filesize
24KB
-
Filesize
6.1MB
-
Filesize
1.0MB
-
Filesize
72KB
-
Filesize
240KB
-
Filesize
304KB