General
- Target file.exe
- Size 368KB
- Sample230801-trclhsad7y
- SHA256 b805ee9e91c4716831f7f44ab17a2e58ec9f90c73be93cf7468fee62edcbc2d7
- MD5 c7724948618884f5ffa37f6c8464d281
- SHA1 e0a0acd0c010d3075a314b989f81f62128332a2d
- SHA512 189b11c0329043ea8218fa15797b9926a56e86272a9909159d0e2c19f41b3e55ba52629a3532446b2601583bd67a233693481df1ee6cfc70efa135d938c40dcd
- SSDEEP 6144:ixY97I4bLTnjMbe08UcJzNXEDdMvkWXJzSzwwr5SVjiDS:8Z4b3Abe08Ucl5gOMWdSzfr5S9i
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
51.89.201.49:6932
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target file.exe
- Size 368KB
- SHA256 b805ee9e91c4716831f7f44ab17a2e58ec9f90c73be93cf7468fee62edcbc2d7
- MD5 c7724948618884f5ffa37f6c8464d281
- SHA1 e0a0acd0c010d3075a314b989f81f62128332a2d
- SHA512 189b11c0329043ea8218fa15797b9926a56e86272a9909159d0e2c19f41b3e55ba52629a3532446b2601583bd67a233693481df1ee6cfc70efa135d938c40dcd
- SSDEEP 6144:ixY97I4bLTnjMbe08UcJzNXEDdMvkWXJzSzwwr5SVjiDS:8Z4b3Abe08Ucl5gOMWdSzfr5S9i
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting