General
- Target file.exe
- Size 394KB
- Sample230128-rwallsfb69
- SHA256 02302e2e4f865c61fc2464dc26f04843f24a465698792d5cdc76820a4e04178f
- MD5 59fd4d2e6ca98585c6c4b203d1435968
- SHA1 957c62af41128609c76dca2ca6982659117e295f
- SHA512 9caa63f16e436e9a3ec4c4117b46535d98bb167d79f7ed2033497760cd1e887327c2316e3586dd60b189b9b345114826258655fb4bf7da4630a9ce346760288b
- SSDEEP 6144:yOvLyLflukZm7cgGXwBVffcszKU2EuqSwzIDMaP:yOv+h1k5BVHZzKU2nqSAeM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 02302e2e4f865c61fc2464dc26f04843f24a465698792d5cdc76820a4e04178f
- MD5 59fd4d2e6ca98585c6c4b203d1435968
- SHA1 957c62af41128609c76dca2ca6982659117e295f
- SHA512 9caa63f16e436e9a3ec4c4117b46535d98bb167d79f7ed2033497760cd1e887327c2316e3586dd60b189b9b345114826258655fb4bf7da4630a9ce346760288b
- SSDEEP 6144:yOvLyLflukZm7cgGXwBVffcszKU2EuqSwzIDMaP:yOv+h1k5BVHZzKU2nqSAeM
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.