General
- Target file.exe
- Size 274KB
- Sample230131-cfjf9aga2t
- SHA256 b8ffb1f4ec3006ecde89e6bc20265e78c829d0ce77d4f7c3714fc173f1c82ccd
- MD5 1093f665e50cf7c800fefede10a1e3b7
- SHA1 3945c69c6add23c39fd561c0f181c5548cfa564f
- SHA512 0d2de7466a3b2f29eba727fbf90c23a46aac821a78d8e3daf7479f4d46daea51924966b8b03f42333350ddaa1efba5c7e0665515cf0c2f4e6162a642892ef6fd
- SSDEEP 6144:tLlyQxSZXSP8A2KLreOQMHDEjEzLlvXyldddd:twQxSd82KLiO/DGEzLlfyldddd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 274KB
- SHA256 b8ffb1f4ec3006ecde89e6bc20265e78c829d0ce77d4f7c3714fc173f1c82ccd
- MD5 1093f665e50cf7c800fefede10a1e3b7
- SHA1 3945c69c6add23c39fd561c0f181c5548cfa564f
- SHA512 0d2de7466a3b2f29eba727fbf90c23a46aac821a78d8e3daf7479f4d46daea51924966b8b03f42333350ddaa1efba5c7e0665515cf0c2f4e6162a642892ef6fd
- SSDEEP 6144:tLlyQxSZXSP8A2KLreOQMHDEjEzLlvXyldddd:twQxSd82KLiO/DGEzLlfyldddd
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.