General
- Target file.exe
- Size 421KB
- Sample230203-avmfcace7t
- SHA256 6689dbd112779e3470f50548c4de20d5f9543feaf084635fcabb269c037daad3
- MD5 06ed7ea570d899163cd1864c5dc93661
- SHA1 c1186c6d2120eaf765ba432e194bafc20066b78e
- SHA512 fc1bc989f8fefa7d068dc4add363d16114e26000ca1c791e44e68d83c5decf60db7d859717aed12693c3d6fc73eadd5f1c53e746ca41f8d29a59278e6855f0a7
- SSDEEP 6144:uZFEaLCHLEem1q6HSQh3j8u2lMQPPMG17QotQW8Y53lwKwpx5jV6ptCbNKN:uZFEa2HQemAczz2F17wWT5le9
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 6689dbd112779e3470f50548c4de20d5f9543feaf084635fcabb269c037daad3
- MD5 06ed7ea570d899163cd1864c5dc93661
- SHA1 c1186c6d2120eaf765ba432e194bafc20066b78e
- SHA512 fc1bc989f8fefa7d068dc4add363d16114e26000ca1c791e44e68d83c5decf60db7d859717aed12693c3d6fc73eadd5f1c53e746ca41f8d29a59278e6855f0a7
- SSDEEP 6144:uZFEaLCHLEem1q6HSQh3j8u2lMQPPMG17QotQW8Y53lwKwpx5jV6ptCbNKN:uZFEa2HQemAczz2F17wWT5le9
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.