General
- Target file.exe
- Size 421KB
- Sample230203-ab15dscd2t
- SHA256 bd367c0b495bdaf49adba791decda194c55a5403880a152ec113c7e61fecbf8d
- MD5 5053e768c65b528396e53ae8ec181c4c
- SHA1 f53250c26cdb5cc58347e0bbc5a820f1bb1e263e
- SHA512 3829615a1b53e8a2023ff7478f5bda6e83dae591ffbae52f8a4c5fa13ad0542617e2197d8c2baa84d2fafad071257f3525c96c5e954514b14cedf9f5008e1daa
- SSDEEP 6144:3xvAL9OfhSnbkJ73nOu2XRNUS5p4F8fERNjEp3lwKwpxhg7ELjV6ptCbNKNc:3xvAwfsnbkh3nO7RyP8fERxEpleyCf
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 bd367c0b495bdaf49adba791decda194c55a5403880a152ec113c7e61fecbf8d
- MD5 5053e768c65b528396e53ae8ec181c4c
- SHA1 f53250c26cdb5cc58347e0bbc5a820f1bb1e263e
- SHA512 3829615a1b53e8a2023ff7478f5bda6e83dae591ffbae52f8a4c5fa13ad0542617e2197d8c2baa84d2fafad071257f3525c96c5e954514b14cedf9f5008e1daa
- SSDEEP 6144:3xvAL9OfhSnbkJ73nOu2XRNUS5p4F8fERNjEp3lwKwpxhg7ELjV6ptCbNKNc:3xvAwfsnbkh3nO7RyP8fERxEpleyCf
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.