General
- Target 0297c11c91595bb24d1a04c866e9a25f.exe
- Size 352KB
- Sample230813-ebmdfsgh78
- SHA256 6dbf5bd3cc04522f3a9a8694ccef864b3abc2e63f4d553b9a68ace16d9666f65
- MD5 0297c11c91595bb24d1a04c866e9a25f
- SHA1 6747221c70e8ed7fb5d185877b5e6b0a5f47bd86
- SHA512 62431871248c21defbee0766ac29551d962ad7be609d3e658f141b7f032580a967700a66c410d165eedb90de51e65ddd48c7549ea9ca6ff29dc97a944c5490b5
- SSDEEP 6144:xbk+nLlWV4mcgbKbZKr48KiZQhmH8VenwoD+GCTwm1MjlkRwQ4fvBBt:xY+nxWV4mcgbKbcHKiZQ9SXDruCW+v
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0297c11c91595bb24d1a04c866e9a25f.exe
Resource
win7-20230712-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (TG: @logsdillabot)
C2
-
51.83.170.21:19447
Attributes
-
auth_value
3a050df92d0cf082b2cdaf87863616be
Targets
-
- Target 0297c11c91595bb24d1a04c866e9a25f.exe
- Size 352KB
- SHA256 6dbf5bd3cc04522f3a9a8694ccef864b3abc2e63f4d553b9a68ace16d9666f65
- MD5 0297c11c91595bb24d1a04c866e9a25f
- SHA1 6747221c70e8ed7fb5d185877b5e6b0a5f47bd86
- SHA512 62431871248c21defbee0766ac29551d962ad7be609d3e658f141b7f032580a967700a66c410d165eedb90de51e65ddd48c7549ea9ca6ff29dc97a944c5490b5
- SSDEEP 6144:xbk+nLlWV4mcgbKbZKr48KiZQhmH8VenwoD+GCTwm1MjlkRwQ4fvBBt:xY+nxWV4mcgbKbcHKiZQ9SXDruCW+v
- MD5 SHA1 SHA512 SSDEEP
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Accesses cryptocurrency files/wallets, possible credential harvesting