General
- Target file.exe
- Size 394KB
- Sample230129-htr87sch55
- SHA256 69714c2c1c69111fcb0851468e5cd9535dadc398cb201030e33d2e642dbbd243
- MD5 13d7cd0b7ce2800a29773c205cc36010
- SHA1 7d7aefda048102ff7bbb4a2346ef5b47a77790cb
- SHA512 bb1f95471587baaefb87f6baadebb0dba445f6ab1ce0dc3c5df4ca65388de3c35d9cbfe55756bbd443db75491aa23bc98a129452e9afa6bf2d106365699b1ff3
- SSDEEP 6144:ULXnIvEVCP3zkMvAfg2ddhaJo9sgU+7gXf9PFam0E954xO45FZ:U7kzkMmg2d99JUqgv9PFamRz4xOmFZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 69714c2c1c69111fcb0851468e5cd9535dadc398cb201030e33d2e642dbbd243
- MD5 13d7cd0b7ce2800a29773c205cc36010
- SHA1 7d7aefda048102ff7bbb4a2346ef5b47a77790cb
- SHA512 bb1f95471587baaefb87f6baadebb0dba445f6ab1ce0dc3c5df4ca65388de3c35d9cbfe55756bbd443db75491aa23bc98a129452e9afa6bf2d106365699b1ff3
- SSDEEP 6144:ULXnIvEVCP3zkMvAfg2ddhaJo9sgU+7gXf9PFam0E954xO45FZ:U7kzkMmg2d99JUqgv9PFamRz4xOmFZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.