General
- Target file.exe
- Size 313KB
- Sample230710-pxbtysbc3z
- SHA256 0c5d1c2c1f5bcb910d25419e87349bce28055b67de3ef6bd1e511a6b17290fce
- MD5 f4da3bf12c10786ba3cdf5a1eef0d386
- SHA1 dc3d6daefead81844e1e6a41eb992d3679239196
- SHA512 fc33454cebca070fb0cb7bccc8c8e0511848c246f30e52ef39819e9949a0315e8f5190e7e6916142d202ff4cf5829eb7d6353cf96d9fd4e53f725cd098b050f9
- SSDEEP 6144:CAkL3Uvz8l3yh+oAWdCQMt31Nbd7kDmsrO7:9kzOzuyhtCbtldgmk
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230703-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
146.59.161.7:48080
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target file.exe
- Size 313KB
- SHA256 0c5d1c2c1f5bcb910d25419e87349bce28055b67de3ef6bd1e511a6b17290fce
- MD5 f4da3bf12c10786ba3cdf5a1eef0d386
- SHA1 dc3d6daefead81844e1e6a41eb992d3679239196
- SHA512 fc33454cebca070fb0cb7bccc8c8e0511848c246f30e52ef39819e9949a0315e8f5190e7e6916142d202ff4cf5829eb7d6353cf96d9fd4e53f725cd098b050f9
- SSDEEP 6144:CAkL3Uvz8l3yh+oAWdCQMt31Nbd7kDmsrO7:9kzOzuyhtCbtldgmk
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.