General

  • Target

    file

  • Size

    405KB

  • Sample

    231012-xjwafabc55

  • MD5

    81e1ad93faa9c9eb87c1ca190e78df54

  • SHA1

    77df978e6a2400d4831a07ba23d10914c101f611

  • SHA256

    42df844a60c2121d9e334a9fed2b21653adba1766f4a552e747d41917e12fa78

  • SHA512

    5b4505d7bd4bd475b89db43f2fcf30085215dc000610e07d951c0c83055d1f47e41f5601cbb539f2bcad5b768b33fa5fa15a70788818e8ba5fe1ed4d319a533f

  • SSDEEP

    6144:/7vJm09zORs+z/TMify9DAOEoQHavKkZo7bNHu/E+iy2bHRXova4+br333csGguJ:/bw09CK5Nr+HuM+eRuaosGgum85

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

51.38.95.107:42494

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Targets

    • Target

      file

    • Size

      405KB

    • MD5

      81e1ad93faa9c9eb87c1ca190e78df54

    • SHA1

      77df978e6a2400d4831a07ba23d10914c101f611

    • SHA256

      42df844a60c2121d9e334a9fed2b21653adba1766f4a552e747d41917e12fa78

    • SHA512

      5b4505d7bd4bd475b89db43f2fcf30085215dc000610e07d951c0c83055d1f47e41f5601cbb539f2bcad5b768b33fa5fa15a70788818e8ba5fe1ed4d319a533f

    • SSDEEP

      6144:/7vJm09zORs+z/TMify9DAOEoQHavKkZo7bNHu/E+iy2bHRXova4+br333csGguJ:/bw09CK5Nr+HuM+eRuaosGgum85

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks