General
- Target file.exe
- Size 393KB
- Sample230129-rb4zqaac77
- SHA256 c317a048fb1c2b31f3c3f3e4cabe8795e06cb4fac3e379e8e2be3c77950df6bc
- MD5 86c811a7283658d521852c9fb8e6b89d
- SHA1 9a58dec57f09fb5de1335be18fc59c4470dbd307
- SHA512 c70b8114f1aceb87475ed0c014d9347724c44051ba28e7d413e3ac997c877158f75a4bfd46c89a6ed99d577b0e15202699d4d321cb89fd87155f11924d8c78c9
- SSDEEP 6144:dLIN+0ZS6HhX6Thv/oMIzHogYIPzyGRbDrieEWaj0d:dcbSCIh3NIjVnb3iV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 393KB
- SHA256 c317a048fb1c2b31f3c3f3e4cabe8795e06cb4fac3e379e8e2be3c77950df6bc
- MD5 86c811a7283658d521852c9fb8e6b89d
- SHA1 9a58dec57f09fb5de1335be18fc59c4470dbd307
- SHA512 c70b8114f1aceb87475ed0c014d9347724c44051ba28e7d413e3ac997c877158f75a4bfd46c89a6ed99d577b0e15202699d4d321cb89fd87155f11924d8c78c9
- SSDEEP 6144:dLIN+0ZS6HhX6Thv/oMIzHogYIPzyGRbDrieEWaj0d:dcbSCIh3NIjVnb3iV
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.