General
- Target 4756-134-0x0000000000400000-0x0000000000432000-memory.dmp
- Size 200KB
- Sample230324-msd3eadg38
- SHA256 47f7d581364996e8c1bea7f43d4dab48e637f46cb7ae8e028e87ad20fdf20b64
- MD5 51c6958940b0186ca7afc8b06bb46b8c
- SHA1 69c6641080f428d76ee312c83b3d17f333b8e41a
- SHA512 8c6968d5d5adb5411d9a952dd36c66656f37260c7690bab47c1dc698ee955de1a6658bc592613e59c6c028ffde3f039a97c26685352f570ab6d507eb925d6821
- SSDEEP 3072:HxqZWzYa5kLBVb6kq8Ikeu890hZbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOc:RqZRb6bHf0h
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
4756-134-0x0000000000400000-0x0000000000432000-memory.exe
Resource
win7-20230220-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4756-134-0x0000000000400000-0x0000000000432000-memory.exe
Resource
win10v2004-20230220-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (TG: @logsdillabot)
C2
-
51.210.161.21:36108
Attributes
-
auth_value
3a050df92d0cf082b2cdaf87863616be
Targets
-
- Target 4756-134-0x0000000000400000-0x0000000000432000-memory.dmp
- Size 200KB
- SHA256 47f7d581364996e8c1bea7f43d4dab48e637f46cb7ae8e028e87ad20fdf20b64
- MD5 51c6958940b0186ca7afc8b06bb46b8c
- SHA1 69c6641080f428d76ee312c83b3d17f333b8e41a
- SHA512 8c6968d5d5adb5411d9a952dd36c66656f37260c7690bab47c1dc698ee955de1a6658bc592613e59c6c028ffde3f039a97c26685352f570ab6d507eb925d6821
- SSDEEP 3072:HxqZWzYa5kLBVb6kq8Ikeu890hZbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOc:RqZRb6bHf0h
- MD5 SHA1 SHA512 SSDEEP
Score1/10