General
- Target c38636896afd2bff5af0a8c641a50e0f.exe
- Size 441KB
- Sample211022-x9hr2adaal
- SHA256 351b7b183ee55d280acfffc23886ef74efd76873d508704336bb782d84176f90
- MD5 c38636896afd2bff5af0a8c641a50e0f
- SHA1 688967ba3b597755c31be44bf8daf3554840674d
- SHA512 b7248bcc030094f514ac89c6548812992b6eb6cf61b715469d7f83b43e82cb0bd2ddf0482690bd588f0309f682d3868951bebc6cdbd4fe54dcf6373863f63aeb
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
c38636896afd2bff5af0a8c641a50e0f.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
c38636896afd2bff5af0a8c641a50e0f.exe
Resource
win10-en-20211014
0 signatures
0 seconds
Malware Config
Targets
-
- Target c38636896afd2bff5af0a8c641a50e0f.exe
- Size 441KB
- SHA256 351b7b183ee55d280acfffc23886ef74efd76873d508704336bb782d84176f90
- MD5 c38636896afd2bff5af0a8c641a50e0f
- SHA1 688967ba3b597755c31be44bf8daf3554840674d
- SHA512 b7248bcc030094f514ac89c6548812992b6eb6cf61b715469d7f83b43e82cb0bd2ddf0482690bd588f0309f682d3868951bebc6cdbd4fe54dcf6373863f63aeb
- MD5 SHA1 SHA512
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine Payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.