Overview

overview

10

Static

static

10

906d63b7bc...cs.exe

windows7-x64

10

906d63b7bc...cs.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/05/2024, 23:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    906d63b7bc17c94b32a3183856f71650_NeikiAnalytics.exe

  • Size

    172KB

  • MD5

    906d63b7bc17c94b32a3183856f71650

  • SHA1

    ebe61b3c96b16144d355058ce12835be79380f46

  • SHA256

    0c847d97c063e8c8d003169d59e68340f3e0af0bd3ce24b6f4c28e3e58a240a5

  • SHA512

    2145d1d93a7730b413efc9836bba077a47f61008370a19d6e3b5f6631eac49e00b6e1b11b6cda063d4e776aff9a83621772deb51aec0c98e20a23f3892bb3f7c

  • SSDEEP

    3072:gi0IDvSs8p2hxNHeMqnm4XaSK0ghE8e8hD:XJ91QLXaSK0ghE

Score
10/10
redlinedroidinfostealer

Malware Config

Extracted

Family

redline

Botnet

droid

C2

83.97.73.129:19068

Attributes
  • auth_value

    4e534d26d67e90669e9843dbbfac4c52

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\906d63b7bc17c94b32a3183856f71650_NeikiAnalytics.exe
    "C:\Users\Admin\AppData\Local\Temp\906d63b7bc17c94b32a3183856f71650_NeikiAnalytics.exe"
    1⤵
      PID:3532

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3532-0-0x0000000074BEE000-0x0000000074BEF000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3532-1-0x00000000005E0000-0x0000000000610000-memory.dmp

      Filesize

      192KB

      Download

    • memory/3532-2-0x0000000004EF0000-0x0000000004EF6000-memory.dmp

      Filesize

      24KB

      Download

    • memory/3532-3-0x0000000005670000-0x0000000005C88000-memory.dmp

      Filesize

      6.1MB

      Download

    • memory/3532-4-0x0000000005160000-0x000000000526A000-memory.dmp

      Filesize

      1.0MB

      Download

    • memory/3532-5-0x0000000005070000-0x0000000005082000-memory.dmp

      Filesize

      72KB

      Download

    • memory/3532-6-0x0000000074BE0000-0x0000000075390000-memory.dmp

      Filesize

      7.7MB

      Download

    • memory/3532-7-0x00000000050D0000-0x000000000510C000-memory.dmp

      Filesize

      240KB

      Download

    • memory/3532-8-0x0000000005110000-0x000000000515C000-memory.dmp

      Filesize

      304KB

      Download

    • memory/3532-9-0x0000000074BEE000-0x0000000074BEF000-memory.dmp

      Filesize

      4KB

      Download

    • memory/3532-10-0x0000000074BE0000-0x0000000075390000-memory.dmp

      Filesize

      7.7MB

      Download