Overview

overview

10

Static

static

3

ef8f11e632...97.exe

windows7-x64

10

ef8f11e632...97.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c31bc2f6df02fc0d14548294952701b.bin

  • Size

    203KB

  • Sample

    230716-ccswhsdb5y

  • MD5

    b2663dceb22f625252ce1effb95330e7

  • SHA1

    68eec78d0326e3971db0507e5f1b39851c596463

  • SHA256

    13650948b9bb4c92a355e218cc8df258cbc3ef4ab2dda28ab91026f98ce95151

  • SHA512

    5678badb3ba5ad3782c4ad8f43521356178f32bdd837ac6f96f36e9ef2d96698aa41b1722792efd66c47448d7f252f7cbb4245ae6c7c664712de9e36c074d587

  • SSDEEP

    6144:/p4Og8OOU97ApPTNbllZqwsVW7E0ubnr/:/pQ8LU9OPqfVaw/

Score
10/10
redlinelogsdiller cloud (telegram: @logsdillabot)infostealer

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

147.135.165.22:17748

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Targets

    • Target

      ef8f11e6329370a13d6a82056ca5dadfa4a611ffdb719bd523a9c25b8ad07297.exe

    • Size

      243KB

    • MD5

      8c31bc2f6df02fc0d14548294952701b

    • SHA1

      b5452d152478233523d103bf6264cd81e272ecc6

    • SHA256

      ef8f11e6329370a13d6a82056ca5dadfa4a611ffdb719bd523a9c25b8ad07297

    • SHA512

      30089ad239029bfe18bbe23c831b681594844600d44e88563c4f782ee146d6984f3e57983d2a8bbf613580f13cf4460469e8c315e8186dae86185cf6b69a0cda

    • SSDEEP

      3072:pgLoZvFKnrsTWKVu3ZSUO7sWelL92Mc1dPf+7htLwjLRf+FRFF0LBn95ShZU6lK8:SLoZgVKA92Mdw3Z+jFFaSfjlaHZ0

    Score
    10/10
    redlinelogsdiller cloud (telegram: @logsdillabot)infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks