General
-
Target
3b304e4978f963f7a6433dec28ee522a.exe
-
Size
278KB
-
Sample
210311-ppk2ceax8s
-
MD5
3b304e4978f963f7a6433dec28ee522a
-
SHA1
0c6a91710d02c48855f575f4d07308c9f09674f4
-
SHA256
20d2a831d8c0d91df5a26a5c3251b82c31254185ec12bd4ff8fa305c2103235b
-
SHA512
b80fc3acf61036fd2bb71878ec83ff465be6a7e5d58e68add48182b2a4e1b6f6f2aed8c04a928ba65472f8136c964aff7a43606f318f399ac75fbfb67b2da209
Static task
static1
Behavioral task
behavioral1
Sample
3b304e4978f963f7a6433dec28ee522a.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
3b304e4978f963f7a6433dec28ee522a.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
3b304e4978f963f7a6433dec28ee522a.exe
-
Size
278KB
-
MD5
3b304e4978f963f7a6433dec28ee522a
-
SHA1
0c6a91710d02c48855f575f4d07308c9f09674f4
-
SHA256
20d2a831d8c0d91df5a26a5c3251b82c31254185ec12bd4ff8fa305c2103235b
-
SHA512
b80fc3acf61036fd2bb71878ec83ff465be6a7e5d58e68add48182b2a4e1b6f6f2aed8c04a928ba65472f8136c964aff7a43606f318f399ac75fbfb67b2da209
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-