General
- Target file.exe
- Size 394KB
- Sample230128-v5z5eagh71
- SHA256 9890ec39b9d8146654db2f6fd2b03506d6e2b33e2fb0d279b52a735723940652
- MD5 b233bd924e256ceb482624d048734031
- SHA1 8a05e2f988133651d6a3f8249d138cca2f3b2f7e
- SHA512 bee0358ebbb59ff4c366bb938c2a65b579ad6835f36a6146e673d54dc0d4205721c897bf7ee61befec4da5e33ed311407330f6cbf6111c4b0a58cb341c3a4e04
- SSDEEP 6144:ULa9GvAe0deJBSmrobx2fNcWEjqcrUyBphoqSwzIDMOulQYOP:UeMvAe0mBFrs+FEZZhoqSAeM9lL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 9890ec39b9d8146654db2f6fd2b03506d6e2b33e2fb0d279b52a735723940652
- MD5 b233bd924e256ceb482624d048734031
- SHA1 8a05e2f988133651d6a3f8249d138cca2f3b2f7e
- SHA512 bee0358ebbb59ff4c366bb938c2a65b579ad6835f36a6146e673d54dc0d4205721c897bf7ee61befec4da5e33ed311407330f6cbf6111c4b0a58cb341c3a4e04
- SSDEEP 6144:ULa9GvAe0deJBSmrobx2fNcWEjqcrUyBphoqSwzIDMOulQYOP:UeMvAe0mBFrs+FEZZhoqSAeM9lL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.