General
- Target file.exe
- Size 275KB
- Sample230130-219llsdb57
- SHA256 855072cc0c7d0a8130320db7da5331da4eab4e4c7cefc3bf07ff46da3deb927b
- MD5 e741a873b551987235f5e30b8cc5d1dc
- SHA1 794c5a11403ec79f0c5dec9429800ef483558680
- SHA512 de5c50655dccccca96ead820c1798e8df79683db5207cf8775821a66ed380f3b21da6acc300de39cbab046c7e4e5fa280b96e90b31bb5cc1e44f78e93321a23a
- SSDEEP 3072:xj2W4bLfQq3653Oe6BvjHkdbV/mjNw8l5Ni4M+fb8ZST0MSFn+YqwP3DHd5RZR2:0L4q3QfK7HkFVyh7ao8c2FnnnR5
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 275KB
- SHA256 855072cc0c7d0a8130320db7da5331da4eab4e4c7cefc3bf07ff46da3deb927b
- MD5 e741a873b551987235f5e30b8cc5d1dc
- SHA1 794c5a11403ec79f0c5dec9429800ef483558680
- SHA512 de5c50655dccccca96ead820c1798e8df79683db5207cf8775821a66ed380f3b21da6acc300de39cbab046c7e4e5fa280b96e90b31bb5cc1e44f78e93321a23a
- SSDEEP 3072:xj2W4bLfQq3653Oe6BvjHkdbV/mjNw8l5Ni4M+fb8ZST0MSFn+YqwP3DHd5RZR2:0L4q3QfK7HkFVyh7ao8c2FnnnR5
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.