Overview

overview

10

Static

static

1

da1e155c46...2d.exe

windows7-x64

10

da1e155c46...2d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1bf3f0d35eea88eece661ed177e86907fbdc2b19312f001ce3d784fe06d75b00

  • Size

    351KB

  • Sample

    240417-q3aphsbh2s

  • MD5

    63c500b53fdc3e7e8da60d9ea7b89a6a

  • SHA1

    6c92d7891159103e470b1b994a5ed742a3316b42

  • SHA256

    1bf3f0d35eea88eece661ed177e86907fbdc2b19312f001ce3d784fe06d75b00

  • SHA512

    d733441efbb44beda82290e51dae2c10a7db7f28d5bcfc4d5695f12519aa2646437fdae08db2f278971b0d743ba0b9af2209ac786ce3763ea7b4a9753a84c007

  • SSDEEP

    6144:FjoyEYgPa2Wfu4LjVAIu+YsjUysLOmyL7zku1o+txyUm+B7njPu:wYgPyjVS+YsvSeHkuRY7

Score
10/10
redlinelogsdiller cloud (tg: @logsdillabot)infostealer

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.0:29587

Targets

    • Target

      da1e155c46ca6b23409d059b6d85341c0b86c92d2c69dbda85eef3894313662d.exe

    • Size

      392KB

    • MD5

      89ec2c6bf09ed9a38bd11acb2a41cd1b

    • SHA1

      408549982b687ca8dd5efb0e8b704a374bd8909d

    • SHA256

      da1e155c46ca6b23409d059b6d85341c0b86c92d2c69dbda85eef3894313662d

    • SHA512

      c565dbb25dd35ae8dce2a4cf15640053aca8b99c5c78db23648e6618ef316362b77142c6524b47089a7ea05632adee091ec5e82ed95aeb86d2331b8c5f8cc56a

    • SSDEEP

      12288:iSDt4gq9aVLevhc02f0/nndTHh3Ep2a7TL:5Dqg6hcR2ndTZe2a7TL

    Score
    10/10
    redlinelogsdiller cloud (tg: @logsdillabot)infostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks