General
-
Target
file
-
Size
405KB
-
Sample
231012-xjwafabc55
-
MD5
81e1ad93faa9c9eb87c1ca190e78df54
-
SHA1
77df978e6a2400d4831a07ba23d10914c101f611
-
SHA256
42df844a60c2121d9e334a9fed2b21653adba1766f4a552e747d41917e12fa78
-
SHA512
5b4505d7bd4bd475b89db43f2fcf30085215dc000610e07d951c0c83055d1f47e41f5601cbb539f2bcad5b768b33fa5fa15a70788818e8ba5fe1ed4d319a533f
-
SSDEEP
6144:/7vJm09zORs+z/TMify9DAOEoQHavKkZo7bNHu/E+iy2bHRXova4+br333csGguJ:/bw09CK5Nr+HuM+eRuaosGgum85
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230915-en
Malware Config
Extracted
redline
LogsDiller Cloud (Telegram: @logsdillabot)
51.38.95.107:42494
-
auth_value
c2955ed3813a798683a185a82e949f88
Targets
-
-
Target
file
-
Size
405KB
-
MD5
81e1ad93faa9c9eb87c1ca190e78df54
-
SHA1
77df978e6a2400d4831a07ba23d10914c101f611
-
SHA256
42df844a60c2121d9e334a9fed2b21653adba1766f4a552e747d41917e12fa78
-
SHA512
5b4505d7bd4bd475b89db43f2fcf30085215dc000610e07d951c0c83055d1f47e41f5601cbb539f2bcad5b768b33fa5fa15a70788818e8ba5fe1ed4d319a533f
-
SSDEEP
6144:/7vJm09zORs+z/TMify9DAOEoQHavKkZo7bNHu/E+iy2bHRXova4+br333csGguJ:/bw09CK5Nr+HuM+eRuaosGgum85
-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
Suspicious use of SetThreadContext
-