General
- Target file.exe
- Size 275KB
- Sample230131-dj1qdagb2v
- SHA256 f5ea6fcc65c96c95cdd970197783efb5d04b5ab6fba4d6cbeb578ef57daa6b3b
- MD5 7b7b401185e03afc5608488b427dfd72
- SHA1 c2deb92ca0d4a710b15e00631f0a7bcea327c79e
- SHA512 54f6a793c54bc731e3b2c6c93202b2478376bb0a48fbd75cd2208b5aa8632db132b846ec02f42a7a453a34ab5a2eaaab96debf8205b5c773521d9c68cb5dfee3
- SSDEEP 3072:YjuNKILyNu6y5nW9ouOoitcQIE2TEehZ67q4G6HgJtuDziOiJUDpUKcmWZ53VRsD:3Lwu6egyfI7nd4G6IoDzihNZlRsYsv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 275KB
- SHA256 f5ea6fcc65c96c95cdd970197783efb5d04b5ab6fba4d6cbeb578ef57daa6b3b
- MD5 7b7b401185e03afc5608488b427dfd72
- SHA1 c2deb92ca0d4a710b15e00631f0a7bcea327c79e
- SHA512 54f6a793c54bc731e3b2c6c93202b2478376bb0a48fbd75cd2208b5aa8632db132b846ec02f42a7a453a34ab5a2eaaab96debf8205b5c773521d9c68cb5dfee3
- SSDEEP 3072:YjuNKILyNu6y5nW9ouOoitcQIE2TEehZ67q4G6HgJtuDziOiJUDpUKcmWZ53VRsD:3Lwu6egyfI7nd4G6IoDzihNZlRsYsv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.