Analysis
-
max time kernel
140s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
22-11-2024 20:04
General
-
Target
8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073.exe
-
Size
405KB
-
MD5
e0db0b915dfa63e4ed89cf5462f3f561
-
SHA1
4ffcfe7170793e7f096f3fd6d9ce3a0dd069cf33
-
SHA256
8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073
-
SHA512
58a56463320e8ac596b40badb7d4357776cb7b3c845f549d845f4ecf5acf5a52358ef117c9736c03d2a8c4913204d284a1b73f8ae7bfff51c832bf1914eb8a5b
-
SSDEEP
12288:9m4q/GxSh+9Dc+Y16CbZtIjR1A08BqR5jp:9bq/qtkzIjfA0eUp
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
mix23.10
C2
185.215.113.15:21508
Attributes
-
auth_value
408e5b97cb89314de620529179330c9a
Signatures
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload 2 IoCs
-
Redline family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073.exe"C:\Users\Admin\AppData\Local\Temp\8e5a74b17fdfd94a6632fe72395a15146d87d81b513c0c72f477663456104073.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
192KB
-
Filesize
204KB
-
Filesize
1024KB
-
Filesize
4.6MB
-
Filesize
136KB
-
Filesize
128KB
-
Filesize
1024KB
-
Filesize
192KB
-
Filesize
204KB