General
- Target file.exe
- Size 393KB
- Sample230129-1dletsde57
- SHA256 8649c350b9d4a6c36fbc5867b95135a1f80ff6a47f2a5f3f6a40e328ec345ded
- MD5 7e4f15ba4c5053b77c01a6e782ec6016
- SHA1 30d47a824158da714b8aabcfaf61bd5ec7de8b7c
- SHA512 1979ea3c4ff0d3f3c5f888319c28707e7a7661dbf22d3219b49e82827378337b1350a6ecda128abeea4cd8fdf451de5a189021e217d395be39ec4e61b17beeec
- SSDEEP 6144:jvL9jQ0Y+ksjLqEuuVUH6TzpCHvmppYZ0HKyeDW+eeEWajQ6iIL:Thj/ksXqExVUaTzpCHSiuKrZeVQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 393KB
- SHA256 8649c350b9d4a6c36fbc5867b95135a1f80ff6a47f2a5f3f6a40e328ec345ded
- MD5 7e4f15ba4c5053b77c01a6e782ec6016
- SHA1 30d47a824158da714b8aabcfaf61bd5ec7de8b7c
- SHA512 1979ea3c4ff0d3f3c5f888319c28707e7a7661dbf22d3219b49e82827378337b1350a6ecda128abeea4cd8fdf451de5a189021e217d395be39ec4e61b17beeec
- SSDEEP 6144:jvL9jQ0Y+ksjLqEuuVUH6TzpCHvmppYZ0HKyeDW+eeEWajQ6iIL:Thj/ksXqExVUaTzpCHSiuKrZeVQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.