redline | a55ac1675024fe2364102cd1410ec105b443d0c866d68ee7cf3a5ba060d90e5b

Analysis

max time kernel
131s
max time network
141s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 01:23

Target

a55ac1675024fe2364102cd1410ec105b443d0c866d68ee7cf3a5ba060d90e5b.exe
Size

106KB
MD5

757d53805846243e6e7e67d8ec6d0950
SHA1

cca21bba69b60085fa0b1d59b4696c1d53f61308
SHA256

a55ac1675024fe2364102cd1410ec105b443d0c866d68ee7cf3a5ba060d90e5b
SHA512

4a33001fc9ee00fcedb477a3dd3d6249392b9878ff12d263bac9602f3ad62576842f138e1b1d8e376a08c55ebb18f3b98c8d6ac7bc3bdcd4f3a05fd9c6f23e18
SSDEEP

1536:FOpG0Ad02HDgzfdqKbN1gYg6mxcis2bZDKAn0jBobx4J9C00Ien:FOpLA9HDAfdByYg6mxHvDSOsIio

Score

10^/10

Family

redline

Botnet

1612

95.217.35.153:9678

Attributes

RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
infostealer redline

RedLine payload 1 IoCs

Processes:

resource	yara_rule
behavioral1/memory/1928-1-0x00000000001B0000-0x00000000001D0000-memory.dmp	family_redline

C:\Users\Admin\AppData\Local\Temp\a55ac1675024fe2364102cd1410ec105b443d0c866d68ee7cf3a5ba060d90e5b.exe
"C:\Users\Admin\AppData\Local\Temp\a55ac1675024fe2364102cd1410ec105b443d0c866d68ee7cf3a5ba060d90e5b.exe"
1⤵
PID:1928

memory/1928-0-0x000000007479E000-0x000000007479F000-memory.dmp

Filesize
4KB

Download
memory/1928-1-0x00000000001B0000-0x00000000001D0000-memory.dmp

Filesize
128KB

Download
memory/1928-2-0x0000000074790000-0x0000000074E7E000-memory.dmp

Filesize
6.9MB

Download
memory/1928-3-0x000000007479E000-0x000000007479F000-memory.dmp

Filesize
4KB

Download
memory/1928-4-0x0000000074790000-0x0000000074E7E000-memory.dmp

Filesize
6.9MB

Download