General
- Target file.exe
- Size 274KB
- Sample230130-yr4gfsce79
- SHA256 81dbc2665ab610ec33dfd13e3ed5eb3d6f0d6d2eb5ed6ee88c8c7b30f2f55cac
- MD5 b3608e06a582f289143f53d1c0abea95
- SHA1 584fe6161d1c01a4aecd31e32a296e2be9ba7fbb
- SHA512 7ec0d22ec88f6f94f1d76f5182072aad8f79503b4738d479642bee46a52d1d2a4e414ad52ae901f13758af401dbfab74e38bdd7c67cdc6148c5dc3e85dfb3b7e
- SSDEEP 6144:FLiqmP8exACLLekC0Noky3v5XYOx3fALrD:F2qmEeaCLa+Nok9Otwr
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 274KB
- SHA256 81dbc2665ab610ec33dfd13e3ed5eb3d6f0d6d2eb5ed6ee88c8c7b30f2f55cac
- MD5 b3608e06a582f289143f53d1c0abea95
- SHA1 584fe6161d1c01a4aecd31e32a296e2be9ba7fbb
- SHA512 7ec0d22ec88f6f94f1d76f5182072aad8f79503b4738d479642bee46a52d1d2a4e414ad52ae901f13758af401dbfab74e38bdd7c67cdc6148c5dc3e85dfb3b7e
- SSDEEP 6144:FLiqmP8exACLLekC0Noky3v5XYOx3fALrD:F2qmEeaCLa+Nok9Otwr
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.