General
- Target file.exe
- Size 278KB
- Sample230704-vx44dsfg74
- SHA256 235e46637f1767a5398e4fa30e232ffb7f75df107ba58ceefd174ee4938c27a0
- MD5 81f093a69e6ce0825b8700a99664f5d3
- SHA1 d95755e9101fd1a65fb162c9d4490f823ec1937f
- SHA512 ed119a68051c392fde2eee76ca000e221ccd74cff356f37f39e1811d5ec1f0c950aab6299df64c3e0487008c6d0243656ab7c77589e132dc1067ce1914d2761a
- SSDEEP 6144:fskLZgDoqKn1Lot4++KpVS+xUIaHMEJ6g5jajvf:fFgREozqIOkv
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
146.59.161.7:48080
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target file.exe
- Size 278KB
- SHA256 235e46637f1767a5398e4fa30e232ffb7f75df107ba58ceefd174ee4938c27a0
- MD5 81f093a69e6ce0825b8700a99664f5d3
- SHA1 d95755e9101fd1a65fb162c9d4490f823ec1937f
- SHA512 ed119a68051c392fde2eee76ca000e221ccd74cff356f37f39e1811d5ec1f0c950aab6299df64c3e0487008c6d0243656ab7c77589e132dc1067ce1914d2761a
- SSDEEP 6144:fskLZgDoqKn1Lot4++KpVS+xUIaHMEJ6g5jajvf:fFgREozqIOkv
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.