Analysis
-
max time kernel
131s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
28/05/2024, 12:15
General
-
Target
435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe
-
Size
172KB
-
MD5
435091cfa19f366279cfb437d02ac050
-
SHA1
f6d2beb006dcb8e9031d675b8a38f9fffe6bbacd
-
SHA256
105f5ad45e2f72d11af7f791c34054c325aa7770ae0a115b36b2ae8a0ddbaca9
-
SHA512
897a79da309022ad3ced2756664f5f99af1dd2bb35a007ce64a563025df9a1a9d4317843fbfecaf1b8f9439aed46a12db71a646b620a30760ccab5c3b982af85
-
SSDEEP
3072:vC9wrcA6NlreW9xN/m0v9hGd75054hE8e8h8:vCA6XCWxfGd75054hE
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
hares
C2
83.97.73.128:19071
Attributes
-
auth_value
62fed2fd42b168e956200885cefb36a7
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\435091cfa19f366279cfb437d02ac050_NeikiAnalytics.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
192KB
-
Filesize
24KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB