Analysis
-
max time kernel
147s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
11-11-2024 07:34
General
-
Target
file.exe
-
Size
67KB
-
MD5
18d92351638bfb75ba4227718853232c
-
SHA1
303accd43e7029fc10599a29c7994048f6edd1f4
-
SHA256
6e24e6ccb7db2bd5e3c6c4b9b7421cae6e8f45dbcf4892e872d4f3be22685e6f
-
SHA512
2d8a5f082aa72ed602d98e52b9985bc6e96089ac5e5af9eb3f74f2c3e9d2f9b261f0015dc3f2ab3e434a5eee38109c4e72b84019a830ff93d94cb4e605f6eb2e
-
SSDEEP
1536:PzNtal9uYoIQME5AqCDbc4RJ3JMmqY4hbsJbU:PzNtU3uME5+b9R7rro
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
11
C2
42.1.62.187:443
Attributes
-
auth_value
082067aa78f09dd97c52eb698c09fe81
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 1 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\file.exe"C:\Users\Admin\AppData\Local\Temp\file.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
96KB
-
Filesize
128KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB