General
- Target d2f50a59a4508017ef012fa1494fdef6.exe
- Size 348KB
- Sample230723-we5smsfe29
- SHA256 c5681e4b56fb82a3b9bed4e8fa7a1afb6514539ea4491d3518ef1a45da7cfbef
- MD5 d2f50a59a4508017ef012fa1494fdef6
- SHA1 f76f070835b8a7186a1cf7472863ca6c7129131b
- SHA512 80335312baac737fa1fa2a7f5c9a2336e85e51ced1e20fbde1a8c5921b3ce7d506db150a73214a2ab295b7b133b35ad1b8de8f83fc7ffd50d20ea5c1b95bfccb
- SSDEEP 6144:es/pvihnyuZXkcEWZjaIUwWjDAP6EU7+ijKM8b:N/tqnyudl0eScyEU738
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d2f50a59a4508017ef012fa1494fdef6.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d2f50a59a4508017ef012fa1494fdef6.exe
Resource
win10v2004-20230703-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
149.202.8.114:26642
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target d2f50a59a4508017ef012fa1494fdef6.exe
- Size 348KB
- SHA256 c5681e4b56fb82a3b9bed4e8fa7a1afb6514539ea4491d3518ef1a45da7cfbef
- MD5 d2f50a59a4508017ef012fa1494fdef6
- SHA1 f76f070835b8a7186a1cf7472863ca6c7129131b
- SHA512 80335312baac737fa1fa2a7f5c9a2336e85e51ced1e20fbde1a8c5921b3ce7d506db150a73214a2ab295b7b133b35ad1b8de8f83fc7ffd50d20ea5c1b95bfccb
- SSDEEP 6144:es/pvihnyuZXkcEWZjaIUwWjDAP6EU7+ijKM8b:N/tqnyudl0eScyEU738
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.