General
- Target file.exe
- Size 394KB
- Sample230201-bc7t1abb88
- SHA256 5393f9c789a72cf5d685cc6e1885ec4e11d6b634d5997a2fc237fbc9fd08003c
- MD5 3ca08c1cd5a8424f43fe03e461d2b34f
- SHA1 88ae0b0801a64a49a86bfd7a9446ed29677ce606
- SHA512 ef8e14fad2130d36346ca69c33911356d4a923b630be2b4cd27f8691dfb59ded00221b8c481ae8819a6e4c5d1f746426d12a78810be9decc20a44f25b38143a2
- SSDEEP 6144:H57Lt8v/4TmsY/HjN4FwdatD1x4qEimqMoI88M:Hl54r42+DwpNqMK
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 5393f9c789a72cf5d685cc6e1885ec4e11d6b634d5997a2fc237fbc9fd08003c
- MD5 3ca08c1cd5a8424f43fe03e461d2b34f
- SHA1 88ae0b0801a64a49a86bfd7a9446ed29677ce606
- SHA512 ef8e14fad2130d36346ca69c33911356d4a923b630be2b4cd27f8691dfb59ded00221b8c481ae8819a6e4c5d1f746426d12a78810be9decc20a44f25b38143a2
- SSDEEP 6144:H57Lt8v/4TmsY/HjN4FwdatD1x4qEimqMoI88M:Hl54r42+DwpNqMK
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.