General
- Target file.exe
- Size 421KB
- Sample230202-v39wtsed39
- SHA256 158c8551c7fe29b678279373003ed965594cf3a18cd13d95a57b74736f37fa5d
- MD5 b304fc50f4f253ed957ff8cd1195d73d
- SHA1 9a9506c6fd46575a7a4df88631bcc80966e4a93e
- SHA512 32f937f867dc4bb5207cdb4e9d50b09bbd956ebaf23e8e4b2a5258327e2b14c0ef5a5540ca1b98399af47caed1cd9bcbbbc79394ffce26a447b194dc7ed5739d
- SSDEEP 6144:NHwY3LPEOsNdq3wCA+XggIzyORnKdzVev9/CJTk637eQfnd5Ug0wWB:NHwY3LEPbqgCz4zNJKdC9CJb7d5BN
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 158c8551c7fe29b678279373003ed965594cf3a18cd13d95a57b74736f37fa5d
- MD5 b304fc50f4f253ed957ff8cd1195d73d
- SHA1 9a9506c6fd46575a7a4df88631bcc80966e4a93e
- SHA512 32f937f867dc4bb5207cdb4e9d50b09bbd956ebaf23e8e4b2a5258327e2b14c0ef5a5540ca1b98399af47caed1cd9bcbbbc79394ffce26a447b194dc7ed5739d
- SSDEEP 6144:NHwY3LPEOsNdq3wCA+XggIzyORnKdzVev9/CJTk637eQfnd5Ug0wWB:NHwY3LEPbqgCz4zNJKdC9CJb7d5BN
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.