Resubmissions

11/06/2023, 18:46

230611-xesczsac9y 7

11/06/2023, 18:43

230611-xc3qyaac9t 10

General

  • Target

    0faf46b77e0dc61eac5dab98d372ee9ffa412a53883d901c00887de6d22bdca2.exe

  • Size

    286KB

  • Sample

    230611-xc3qyaac9t

  • MD5

    097ddd6781f3858d61893d04f9b05d3a

  • SHA1

    7b82946ec10785267568ec89db467757521237d6

  • SHA256

    0faf46b77e0dc61eac5dab98d372ee9ffa412a53883d901c00887de6d22bdca2

  • SHA512

    98d3a47958a5ae01ac40b16455941071876601f928b68fc483f333a4f6d4d182b992237877cb1c5837bbb66fd6bf4b0f6d636fef61adb392183e4c28f41553e9

  • SSDEEP

    3072:y760v47OwsQcRNSWdSnutpsRfOrPxjKYmwm2BuiJyT75enFW3h/1wRdBFtDaH:C68wOT7RNUM+R+5W/N1TV/+bt

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

147.135.231.58:39396

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Targets

    • Target

      0faf46b77e0dc61eac5dab98d372ee9ffa412a53883d901c00887de6d22bdca2.exe

    • Size

      286KB

    • MD5

      097ddd6781f3858d61893d04f9b05d3a

    • SHA1

      7b82946ec10785267568ec89db467757521237d6

    • SHA256

      0faf46b77e0dc61eac5dab98d372ee9ffa412a53883d901c00887de6d22bdca2

    • SHA512

      98d3a47958a5ae01ac40b16455941071876601f928b68fc483f333a4f6d4d182b992237877cb1c5837bbb66fd6bf4b0f6d636fef61adb392183e4c28f41553e9

    • SSDEEP

      3072:y760v47OwsQcRNSWdSnutpsRfOrPxjKYmwm2BuiJyT75enFW3h/1wRdBFtDaH:C68wOT7RNUM+R+5W/N1TV/+bt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks