General
- Target file.exe
- Size 389KB
- Sample230127-za94cada92
- SHA256 ea01b4415220a42a9edc0adc2fe0f697a6c72632eaec5a77f62187bf055f348a
- MD5 bd822827cf68478798aa95b1b5d94629
- SHA1 9b0bb4946516ea2d01a3e466c3b9590a448fce3f
- SHA512 31bf0522241fd0505ba77b61ddcdc1673facbbc724ae06d1467b4f4e2a8aba13e0228efe30583140e4201b8e4afc159bd3a706a3da3eade68ba7deeecfeb6f2f
- SSDEEP 6144:gL0p7UT1U6j25sTuLEHOjhLBTf/y0GCB3aclJFx9CEbnVnu9v8dV5:gIBUKoD0NLBTf/yjQLCWluCdV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 389KB
- SHA256 ea01b4415220a42a9edc0adc2fe0f697a6c72632eaec5a77f62187bf055f348a
- MD5 bd822827cf68478798aa95b1b5d94629
- SHA1 9b0bb4946516ea2d01a3e466c3b9590a448fce3f
- SHA512 31bf0522241fd0505ba77b61ddcdc1673facbbc724ae06d1467b4f4e2a8aba13e0228efe30583140e4201b8e4afc159bd3a706a3da3eade68ba7deeecfeb6f2f
- SSDEEP 6144:gL0p7UT1U6j25sTuLEHOjhLBTf/y0GCB3aclJFx9CEbnVnu9v8dV5:gIBUKoD0NLBTf/yjQLCWluCdV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.