General
- Target 396bc5561591f6be2f8962c138afef43.exe
- Size 366KB
- Sample230521-gla5aagd84
- SHA256 794cc354a71c5992f8b303a76a4378630d320d3711ada97664ab97b99e3604e1
- MD5 396bc5561591f6be2f8962c138afef43
- SHA1 eacb411b9723f2bf808b9e58daf8caf8e033ae4d
- SHA512 83be8d9ce3898a993b8d687ddf0ba8a563f5dd670e8993834fedb3c1e9c8c0503d797e87fce374fc31d590f1e0a2be1df5b81a61ef6f17122afc3208a96b3282
- SSDEEP 6144:S7Hx1Kp8Ph1G962WHz00rmGGkS8QLwt+Pse84TK:WQ8Hs69HOGGl8B+PD
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
396bc5561591f6be2f8962c138afef43.exe
Resource
win7-20230220-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
396bc5561591f6be2f8962c138afef43.exe
Resource
win10v2004-20230220-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
178.33.182.70:18918
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target 396bc5561591f6be2f8962c138afef43.exe
- Size 366KB
- SHA256 794cc354a71c5992f8b303a76a4378630d320d3711ada97664ab97b99e3604e1
- MD5 396bc5561591f6be2f8962c138afef43
- SHA1 eacb411b9723f2bf808b9e58daf8caf8e033ae4d
- SHA512 83be8d9ce3898a993b8d687ddf0ba8a563f5dd670e8993834fedb3c1e9c8c0503d797e87fce374fc31d590f1e0a2be1df5b81a61ef6f17122afc3208a96b3282
- SSDEEP 6144:S7Hx1Kp8Ph1G962WHz00rmGGkS8QLwt+Pse84TK:WQ8Hs69HOGGl8B+PD
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload