Analysis
-
max time kernel
130s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
06-06-2024 08:36
General
-
Target
d7b947c8f4365722e24b430542fb015c86d7dafc180e300279e9742e4f6fe8ae.exe
-
Size
402KB
-
MD5
d2d72ee4be8307cd762ed69797ded0fd
-
SHA1
be578c8677e04be3d31b82987afbdcf5cbbd4fc8
-
SHA256
d7b947c8f4365722e24b430542fb015c86d7dafc180e300279e9742e4f6fe8ae
-
SHA512
052dd0803fcdfd96b8671193f03279a5a62dedb8ff245fc4ac48c546fe533b7501e378b76520e85a6ca6bc0958568843729d45b818027b2d0a057d8e6b7a5935
-
SSDEEP
6144:kKEQMaOytRAv9YJGthuNEFoAO+RdTt82OqJ5tAu/YO93Io:kdQHO8RAv9YXmFt82O25tx/0
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
furga
C2
83.97.73.128:19071
Attributes
-
auth_value
1b7af6db7a79a3475798fcf494818be7
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d7b947c8f4365722e24b430542fb015c86d7dafc180e300279e9742e4f6fe8ae.exe"C:\Users\Admin\AppData\Local\Temp\d7b947c8f4365722e24b430542fb015c86d7dafc180e300279e9742e4f6fe8ae.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
24KB
-
Filesize
420KB
-
Filesize
12KB
-
Filesize
192KB