General
- Target file.exe
- Size 394KB
- Sample230128-1c14wsab3w
- SHA256 59d3f1a5837f1626fdec6b18c0c4919da1ecd68417bea9cdf467e95366b85957
- MD5 ddb64996fd4f793079ade2d263c90a16
- SHA1 28dfdbf6858f0fadca0b407711b72cd3a274b8d7
- SHA512 698d7ae535873da7077bf8500a05fcddd8728d39ea437800660068812c78cb58a96254fc34683eb52f4b390171661754d642c33e9beb9ac30ff05e6ffb165ab0
- SSDEEP 12288:2i4kfo1Ev1MVLwMmVcSNbBqIQmRz4qlFZ:skfo1Ev+cMFSNb2mRz4qlFZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 59d3f1a5837f1626fdec6b18c0c4919da1ecd68417bea9cdf467e95366b85957
- MD5 ddb64996fd4f793079ade2d263c90a16
- SHA1 28dfdbf6858f0fadca0b407711b72cd3a274b8d7
- SHA512 698d7ae535873da7077bf8500a05fcddd8728d39ea437800660068812c78cb58a96254fc34683eb52f4b390171661754d642c33e9beb9ac30ff05e6ffb165ab0
- SSDEEP 12288:2i4kfo1Ev1MVLwMmVcSNbBqIQmRz4qlFZ:skfo1Ev+cMFSNb2mRz4qlFZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.