General
- Target file.exe
- Size 389KB
- Sample230128-e5cq4sfe81
- SHA256 d32467cea4090a736dbac1bd9ba41deedc9ca1556f63c3d9035e2a304da8b940
- MD5 af6914735ff2f6678c426e07ab605fdc
- SHA1 6bd114c2b3cb489ebcef584b721ce875edd02eaa
- SHA512 8f84e03b6283f5abf358837c719d10f80e71359ca95cb5810cee8b69a5175a4df9b575f1741fae49ec64640ab9d62c3ee00f7dc0ec89bd4d13dcd5f17757b1c1
- SSDEEP 6144:WNLKWdE4rhgWy1KwO1F4YhK9ot+7aXzzs3x9CEbnVno98dV:g2W+ohgH1+F4Yh9lXzI3LCWlo+dV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 389KB
- SHA256 d32467cea4090a736dbac1bd9ba41deedc9ca1556f63c3d9035e2a304da8b940
- MD5 af6914735ff2f6678c426e07ab605fdc
- SHA1 6bd114c2b3cb489ebcef584b721ce875edd02eaa
- SHA512 8f84e03b6283f5abf358837c719d10f80e71359ca95cb5810cee8b69a5175a4df9b575f1741fae49ec64640ab9d62c3ee00f7dc0ec89bd4d13dcd5f17757b1c1
- SSDEEP 6144:WNLKWdE4rhgWy1KwO1F4YhK9ot+7aXzzs3x9CEbnVno98dV:g2W+ohgH1+F4Yh9lXzI3LCWlo+dV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.