General

  • Target

    cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

  • Size

    413KB

  • Sample

    231011-zmy7lsee69

  • MD5

    5c5eb6489ecad14a5161afa90f965adc

  • SHA1

    6922636c390d47f9a77dd30a1ef20a91a369587f

  • SHA256

    cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

  • SHA512

    46c7d4f26a742d793bf26d430e6f185b2de8f5b7c6a6f7cf0c2bf14d971591c23cc2537341174548f7cfb3a1bc216d14ef95c9008a4bad068b8c8323ecdcdd1c

  • SSDEEP

    6144:Ql8hbVeadz9+w/SZHOCu5gRuAO7EUUUUUUMTATsrJ8qefuHvK+APAHqwC:QlCReadAweueu1zVefuK+APZwC

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

146.59.10.173:45035

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Targets

    • Target

      cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

    • Size

      413KB

    • MD5

      5c5eb6489ecad14a5161afa90f965adc

    • SHA1

      6922636c390d47f9a77dd30a1ef20a91a369587f

    • SHA256

      cd0a41dd6a4877a00dce17561da67e03b99a6d88886be9b4b035735d16f1429d

    • SHA512

      46c7d4f26a742d793bf26d430e6f185b2de8f5b7c6a6f7cf0c2bf14d971591c23cc2537341174548f7cfb3a1bc216d14ef95c9008a4bad068b8c8323ecdcdd1c

    • SSDEEP

      6144:Ql8hbVeadz9+w/SZHOCu5gRuAO7EUUUUUUMTATsrJ8qefuHvK+APAHqwC:QlCReadAweueu1zVefuK+APZwC

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks