General

  • Target

    file.exe

  • Size

    350KB

  • Sample

    230723-dn17psdb78

  • MD5

    6f0774089c6cc16d2d0e63eaebe84dd2

  • SHA1

    b64a745494762fce70f160d5c71fe5c06fd84fb9

  • SHA256

    c96153ded15fb3782e6a02dd68aacda1d37b9f66dce2bcc70a69d3545db21b81

  • SHA512

    fcbc07d1b4ea2409cf6e2b8e30b10fff94ad491f6b1d14e47a4eca5d82cf402c79ff4ce5331834155f7208cb4f4fb6da36158f233924ef98552ccbee19687e66

  • SSDEEP

    6144:mlK8gah/S51FzGkXdneOPFur3saHVQEr5Nr3:aK8hRS51oqIO0rRHVQENN

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

178.32.90.250:29608

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Targets

    • Target

      file.exe

    • Size

      350KB

    • MD5

      6f0774089c6cc16d2d0e63eaebe84dd2

    • SHA1

      b64a745494762fce70f160d5c71fe5c06fd84fb9

    • SHA256

      c96153ded15fb3782e6a02dd68aacda1d37b9f66dce2bcc70a69d3545db21b81

    • SHA512

      fcbc07d1b4ea2409cf6e2b8e30b10fff94ad491f6b1d14e47a4eca5d82cf402c79ff4ce5331834155f7208cb4f4fb6da36158f233924ef98552ccbee19687e66

    • SSDEEP

      6144:mlK8gah/S51FzGkXdneOPFur3saHVQEr5Nr3:aK8hRS51oqIO0rRHVQENN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks