Overview

overview

10

Static

static

3

153a434da4...d2.exe

windows7-x64

10

153a434da4...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c2817032d1e9b61df924ed58119802cdae819472424cf7f574dbb3e23a603f9

  • Size

    186KB

  • Sample

    241111-gbdgnaxmen

  • MD5

    2d7242ef163aeb95923bb403a1ff57f4

  • SHA1

    edd2b647d640c98d44fcaaba6908297826db7c5b

  • SHA256

    9c2817032d1e9b61df924ed58119802cdae819472424cf7f574dbb3e23a603f9

  • SHA512

    257e64e910d4149c2443c722a748145e67933cd3be6935c9f52d7e9e77560f3904fd97fcc429c1f8001b300515bd68406180b30e122b1b463d0beae95bb58ebc

  • SSDEEP

    3072:jF0SnG4tI215ukzsv4cnAj3suRMjmyGkb2TSi+s98kQdHRYQtBhCc:eSnA215NcnAjR+J2TSy98kQdHBoc

Score
10/10
redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

51.89.204.181:22299

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Targets

    • Target

      153a434da46b30cd63250c8bda058e73ffaba7200d7bf1ef8786e36a866a00d2.exe

    • Size

      1.2MB

    • MD5

      1d083d762f8008f47d222e1beeca045c

    • SHA1

      33ca88e0b75d136e1a11456544d845a66c9c98ba

    • SHA256

      153a434da46b30cd63250c8bda058e73ffaba7200d7bf1ef8786e36a866a00d2

    • SHA512

      713086b014b85efac9f88f68eddf162fcf27ae1a29cb4dfed87793ce2885f2a18bfb099a32745f8c0817c4d47c965f7e12f663f144fc514950e4126cbbc7a03d

    • SSDEEP

      6144:JRj6GGsmqPbL6pGyjfHI/AO1eO74FdqvwBEXa95mKH:JRj6GG+PpHe4r4BEg5fH

    Score
    10/10
    redlinelogsdiller cloud (tg: @logsdillabot)discoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks