General
- Target file.exe
- Size 390KB
- Sample230128-d22qdsfd7y
- SHA256 476a465112e4918e48b0c51242a88c77e45426a3408037d25b1ca5cb05de1a77
- MD5 57f6f3515da9a0ece1f384c291de81d4
- SHA1 6415f2cc0b3cf52d9ce9f9ff425eab65e513b715
- SHA512 b17d7d042597e7125daabf74c9e234143f632f8972e53ee6f02409b9a7d7a4123395d8fb569f7ae1185a0e013c619c46ce8ebeb037f980abc80ba31b2f4b2a07
- SSDEEP 6144:oLVed4lY5670KR9M6keSV3k76DnZx9CEbnVno38dV:oBes795knqeLCWlosdV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 390KB
- SHA256 476a465112e4918e48b0c51242a88c77e45426a3408037d25b1ca5cb05de1a77
- MD5 57f6f3515da9a0ece1f384c291de81d4
- SHA1 6415f2cc0b3cf52d9ce9f9ff425eab65e513b715
- SHA512 b17d7d042597e7125daabf74c9e234143f632f8972e53ee6f02409b9a7d7a4123395d8fb569f7ae1185a0e013c619c46ce8ebeb037f980abc80ba31b2f4b2a07
- SSDEEP 6144:oLVed4lY5670KR9M6keSV3k76DnZx9CEbnVno38dV:oBes795knqeLCWlosdV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.