General
- Target file.exe
- Size 292KB
- Sample230130-mkdfxabf4x
- SHA256 debb0d4b2d4a3ed1f4efbb96b3391f8ea9a94965a3461d03c7806aed66adea7f
- MD5 1786fd8bad071b192da95de8847b0e81
- SHA1 6827a71ff21cd1cc1775d1736e1e0197b556c22d
- SHA512 3ee21a26d67b84017aad2cef5b806575120cc9697ef0edfcdb2e7bc1bcb13e98ba528ae8cda179fc0b712810cde861ab605ee0f895c573f402a1ba3b4580dc7a
- SSDEEP 6144:tX0QDL9UtA+ZjGaIlxc2JwbS/0KWKk3smp9vuQas+eIze:tXfutAiSlCOEdBImppuQa/e0e
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 292KB
- SHA256 debb0d4b2d4a3ed1f4efbb96b3391f8ea9a94965a3461d03c7806aed66adea7f
- MD5 1786fd8bad071b192da95de8847b0e81
- SHA1 6827a71ff21cd1cc1775d1736e1e0197b556c22d
- SHA512 3ee21a26d67b84017aad2cef5b806575120cc9697ef0edfcdb2e7bc1bcb13e98ba528ae8cda179fc0b712810cde861ab605ee0f895c573f402a1ba3b4580dc7a
- SSDEEP 6144:tX0QDL9UtA+ZjGaIlxc2JwbS/0KWKk3smp9vuQas+eIze:tXfutAiSlCOEdBImppuQa/e0e
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.