General
- Target file.exe
- Size 394KB
- Sample230128-2h7z3agg86
- SHA256 7affc76a4157933fcc362420264c17d8e97ec24efac74f58265b66f9554ac051
- MD5 d3a05c0ff423927ebebefed3504d550b
- SHA1 bd61410abf38958e78b7cdfd0ba89b1f50ebc55c
- SHA512 17586a43d0d15e4064c35344f30e12a16d1217f1694d38abc1ff0cb164e90c5139c0dc54a16e77381da9cdcca6bc2306e7d6c9a2a05ea2e670871fcc24904408
- SSDEEP 6144:bWLq2WMjtlaFUfgJXi0HXlzruohy6MWm0E954QxaJFZ:6Wd6t8zJXi0HX1uoE6MWmRz4QxIFZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 7affc76a4157933fcc362420264c17d8e97ec24efac74f58265b66f9554ac051
- MD5 d3a05c0ff423927ebebefed3504d550b
- SHA1 bd61410abf38958e78b7cdfd0ba89b1f50ebc55c
- SHA512 17586a43d0d15e4064c35344f30e12a16d1217f1694d38abc1ff0cb164e90c5139c0dc54a16e77381da9cdcca6bc2306e7d6c9a2a05ea2e670871fcc24904408
- SSDEEP 6144:bWLq2WMjtlaFUfgJXi0HXlzruohy6MWm0E954QxaJFZ:6Wd6t8zJXi0HX1uoE6MWmRz4QxIFZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.