General
- Target file.exe
- Size 421KB
- Sample230203-bxdfwshf64
- SHA256 5038afc9317be5ae2bd3bfeda959b82a085f2b3c52d14df2b76fc09aa3352307
- MD5 7ae178f4d0825f84851e172ef5718b1e
- SHA1 f19ebecf5fea973803f5a41bb7bfe7c48a5a459c
- SHA512 f1c12b2d00db498d9e78908428dd4f8b520ccd19b06a86d0f6dff96186d9365efaf23e4dad0ed1aa20ce7d3790d126d56b268a5d4d614757d26e80d8a30289a1
- SSDEEP 6144:7hItLzMLGn0XFySOZXr96lbLYuYa3lwKwpxXjV6ptCbNKN:7hIt3M60Vli7uQneleL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 5038afc9317be5ae2bd3bfeda959b82a085f2b3c52d14df2b76fc09aa3352307
- MD5 7ae178f4d0825f84851e172ef5718b1e
- SHA1 f19ebecf5fea973803f5a41bb7bfe7c48a5a459c
- SHA512 f1c12b2d00db498d9e78908428dd4f8b520ccd19b06a86d0f6dff96186d9365efaf23e4dad0ed1aa20ce7d3790d126d56b268a5d4d614757d26e80d8a30289a1
- SSDEEP 6144:7hItLzMLGn0XFySOZXr96lbLYuYa3lwKwpxXjV6ptCbNKN:7hIt3M60Vli7uQneleL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.