General
- Target file.exe
- Size 393KB
- Sample230129-n7fp8aea74
- SHA256 f7ecea8eb230be70d48ec5944bc61da0c8b849af4af72c881738d91a1805de22
- MD5 abd873cfa8a13d80141a6b65d2fc6f72
- SHA1 2f3a0e7c95ffba2cd746bf319041bc65fa6d1a3a
- SHA512 3b78a79c2ff050bd042a7063ffda6dd2f2beaaf6e950978c0a8c4626456069a44f8407b5477b7b0da518f6e59cbcdbafa5df988ce94545864fdef6d24091ffdd
- SSDEEP 6144:4TLaS07HVhvY88YDkkeE41UHnkQPjA2Lvhm0E954cPFF6T:4T2bxIYDkkL41UEqE2NmRz4cdF6
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 393KB
- SHA256 f7ecea8eb230be70d48ec5944bc61da0c8b849af4af72c881738d91a1805de22
- MD5 abd873cfa8a13d80141a6b65d2fc6f72
- SHA1 2f3a0e7c95ffba2cd746bf319041bc65fa6d1a3a
- SHA512 3b78a79c2ff050bd042a7063ffda6dd2f2beaaf6e950978c0a8c4626456069a44f8407b5477b7b0da518f6e59cbcdbafa5df988ce94545864fdef6d24091ffdd
- SSDEEP 6144:4TLaS07HVhvY88YDkkeE41UHnkQPjA2Lvhm0E954cPFF6T:4T2bxIYDkkL41UEqE2NmRz4cdF6
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.