General
- Target file.exe
- Size 390KB
- Sample230128-cgn35afb8v
- SHA256 e68f8cde068df47dbbd8040532ccac127382fffa90552434cfb657df8a001e50
- MD5 bed1da074f5bd56fd5893e3abce7bfac
- SHA1 500a72f3f7d5aace9ba9346547b2af98952d2137
- SHA512 b97988dd50e4267e8927668c4f96e9697ee6254223e13b13b496136950b8387b00c739b19f7112ade65b998158e6d3fc9d1e203b950fb7de71c4262bae3ce4bd
- SSDEEP 6144:JLlEmSrAcew9vKb5pIIDcsr2EfV49x9CEbnVn897I8dV:J5Ev8ceEI3IgW8V+LCWl89pdV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 390KB
- SHA256 e68f8cde068df47dbbd8040532ccac127382fffa90552434cfb657df8a001e50
- MD5 bed1da074f5bd56fd5893e3abce7bfac
- SHA1 500a72f3f7d5aace9ba9346547b2af98952d2137
- SHA512 b97988dd50e4267e8927668c4f96e9697ee6254223e13b13b496136950b8387b00c739b19f7112ade65b998158e6d3fc9d1e203b950fb7de71c4262bae3ce4bd
- SSDEEP 6144:JLlEmSrAcew9vKb5pIIDcsr2EfV49x9CEbnVn897I8dV:J5Ev8ceEI3IgW8V+LCWl89pdV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.