General
- Target file.exe
- Size 277KB
- Sample230703-ap2yvafc91
- SHA256 feb08010c5bdb7dc017bd44a4c22f44ad377bab472cddf49fd0e284b4491d744
- MD5 c38abd8bb4501954e6cec0c28f7550a0
- SHA1 23fa138506fc6e6d98ef22668a1f75dab003fb19
- SHA512 5d1470cbeeb25b7266f677dde3cd2d419d5296402ca9992343c74e296043c9b1b240333588fcfe7b34fe84917d8e6d86658ec51580fc189eee61e53a96de24a3
- SSDEEP 3072:tADL4b6yDvlASZXw7qiWBtdl7L9dutvL6rweWudpDhZTN2fS5vJ/ZEvn2ESyErLQ:8L4b/DvlA+w0dyukgdp3AC6vVSHf8Y
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
146.59.161.7:48080
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target file.exe
- Size 277KB
- SHA256 feb08010c5bdb7dc017bd44a4c22f44ad377bab472cddf49fd0e284b4491d744
- MD5 c38abd8bb4501954e6cec0c28f7550a0
- SHA1 23fa138506fc6e6d98ef22668a1f75dab003fb19
- SHA512 5d1470cbeeb25b7266f677dde3cd2d419d5296402ca9992343c74e296043c9b1b240333588fcfe7b34fe84917d8e6d86658ec51580fc189eee61e53a96de24a3
- SSDEEP 3072:tADL4b6yDvlASZXw7qiWBtdl7L9dutvL6rweWudpDhZTN2fS5vJ/ZEvn2ESyErLQ:8L4b/DvlA+w0dyukgdp3AC6vVSHf8Y
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.