General
- Target file.exe
- Size 396KB
- Sample230804-vmy5dseb2y
- SHA256 0eb8836fbbec229856e5b8ec0703cf55b38c2c94fd1719b994fa23cc8a1b7ab1
- MD5 bf181b18b0c88b985fdb1216cdabb916
- SHA1 507893fd2085d14cad1c25dd4ab9ea184eb35185
- SHA512 cd404779b90af83e0575147e385fd3148836932642b54c355500cb22844a04a7154af9ea5a420f75303889a5d20a95c4e926f207587d88ca92f75700dc5352dd
- SSDEEP 3072:0Xovi4Ff6BI7wO0prGg9mVUUiR+opBCNjCKid2fOrbUqo0w7YuGG8PWLhc0j3v0e:ifsvMOeZ8i3tqOPo0wcLVepj3v
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (Telegram: @logsdillabot)
C2
-
51.89.201.49:6932
Attributes
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
- Target file.exe
- Size 396KB
- SHA256 0eb8836fbbec229856e5b8ec0703cf55b38c2c94fd1719b994fa23cc8a1b7ab1
- MD5 bf181b18b0c88b985fdb1216cdabb916
- SHA1 507893fd2085d14cad1c25dd4ab9ea184eb35185
- SHA512 cd404779b90af83e0575147e385fd3148836932642b54c355500cb22844a04a7154af9ea5a420f75303889a5d20a95c4e926f207587d88ca92f75700dc5352dd
- SSDEEP 3072:0Xovi4Ff6BI7wO0prGg9mVUUiR+opBCNjCKid2fOrbUqo0w7YuGG8PWLhc0j3v0e:ifsvMOeZ8i3tqOPo0wcLVepj3v
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting