General
- Target file.exe
- Size 390KB
- Sample230128-mkdfxaef22
- SHA256 78d9b9eaf94fe911ac5425413a42c2d7d9e4a238bfa00c44543e83f37cf462aa
- MD5 e31fa27b869a342a5decfa7b28ac86de
- SHA1 4f2373d97c6f8a8e0f22763d60865e69be38dbd5
- SHA512 db7889dd4732c5898276e42bc8455e735d429e4478efcdff4e866b14b4900699606beadc0785221b7360af8192803b0759ae2e4a1e5ed21be74edbe5e5349ff5
- SSDEEP 12288:kGQYlKhyaKOH7p8t+m8mVCFUM6syqSAeMG:k8lKhydOHOYjUM6syqSj
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 390KB
- SHA256 78d9b9eaf94fe911ac5425413a42c2d7d9e4a238bfa00c44543e83f37cf462aa
- MD5 e31fa27b869a342a5decfa7b28ac86de
- SHA1 4f2373d97c6f8a8e0f22763d60865e69be38dbd5
- SHA512 db7889dd4732c5898276e42bc8455e735d429e4478efcdff4e866b14b4900699606beadc0785221b7360af8192803b0759ae2e4a1e5ed21be74edbe5e5349ff5
- SSDEEP 12288:kGQYlKhyaKOH7p8t+m8mVCFUM6syqSAeMG:k8lKhydOHOYjUM6syqSj
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.