General
-
Target
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
-
Size
413KB
-
Sample
231011-zmy7lsee69
-
MD5
5c5eb6489ecad14a5161afa90f965adc
-
SHA1
6922636c390d47f9a77dd30a1ef20a91a369587f
-
SHA256
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
-
SHA512
46c7d4f26a742d793bf26d430e6f185b2de8f5b7c6a6f7cf0c2bf14d971591c23cc2537341174548f7cfb3a1bc216d14ef95c9008a4bad068b8c8323ecdcdd1c
-
SSDEEP
6144:Ql8hbVeadz9+w/SZHOCu5gRuAO7EUUUUUUMTATsrJ8qefuHvK+APAHqwC:QlCReadAweueu1zVefuK+APZwC
Static task
static1
Behavioral task
behavioral1
Sample
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
redline
LogsDiller Cloud (TG: @logsdillabot)
146.59.10.173:45035
-
auth_value
3a050df92d0cf082b2cdaf87863616be
Targets
-
-
Target
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
-
Size
413KB
-
MD5
5c5eb6489ecad14a5161afa90f965adc
-
SHA1
6922636c390d47f9a77dd30a1ef20a91a369587f
-
SHA256
cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d
-
SHA512
46c7d4f26a742d793bf26d430e6f185b2de8f5b7c6a6f7cf0c2bf14d971591c23cc2537341174548f7cfb3a1bc216d14ef95c9008a4bad068b8c8323ecdcdd1c
-
SSDEEP
6144:Ql8hbVeadz9+w/SZHOCu5gRuAO7EUUUUUUMTATsrJ8qefuHvK+APAHqwC:QlCReadAweueu1zVefuK+APZwC
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-