General
- Target 2820-78-0x0000000000400000-0x0000000000430000-memory.dmp
- Size 192KB
- Sample230911-2sjp8aca79
- SHA256 618cebe66682e5eaab49aa55573ea2ede2b25e2fe56ab809aa6a323d4936a075
- MD5 a387360f4abded59ed72bace03fb76bf
- SHA1 ffab09a671e452741eaf8ea76f21ea4253485d3b
- SHA512 563b05c4952e1741da58f1725c666b76350fbfe3ea28763814ac1ab6b5e0b0ed437dd3deeb3872dbfc66257e01487a32fc324b7bef9e58ea919c1ba142f3e49c
- SSDEEP 3072:OaCI4M9nFHI0wR/n1OWlDfkkYXmbG8E0gGSNhARJ:OaCI4EHI0wR/nrXYQG8E0yAR
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2820-78-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2820-78-0x0000000000400000-0x0000000000430000-memory.exe
Resource
win10v2004-20230831-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
redline
Botnet
-
LogsDiller Cloud (TG: @logsdillabot)
C2
-
51.38.95.107:42494
Attributes
-
auth_value
3a050df92d0cf082b2cdaf87863616be
Targets
-
- Target 2820-78-0x0000000000400000-0x0000000000430000-memory.dmp
- Size 192KB
- SHA256 618cebe66682e5eaab49aa55573ea2ede2b25e2fe56ab809aa6a323d4936a075
- MD5 a387360f4abded59ed72bace03fb76bf
- SHA1 ffab09a671e452741eaf8ea76f21ea4253485d3b
- SHA512 563b05c4952e1741da58f1725c666b76350fbfe3ea28763814ac1ab6b5e0b0ed437dd3deeb3872dbfc66257e01487a32fc324b7bef9e58ea919c1ba142f3e49c
- SSDEEP 3072:OaCI4M9nFHI0wR/n1OWlDfkkYXmbG8E0gGSNhARJ:OaCI4EHI0wR/nrXYQG8E0yAR
- MD5 SHA1 SHA512 SSDEEP
Score1/10