General
- Target file.exe
- Size 298KB
- Sample230204-f8aatscf63
- SHA256 7bccfe9c03119443d84f9298d0af6553ae3746ee3a7dfdedee5f33ca9e2f012a
- MD5 c5b51a588ffa8f0f6b7c48d4b99bdaf9
- SHA1 57f6b09163d756a19e4a1e92edeac1858e1d18e9
- SHA512 83dd7ee5fd76224a22ebef36700271b780fcd8a33196e84a13dc3e053b570876cf9147f50675796cf7641ec2472d993c9c5a92392fb2302853da1a83963f1c14
- SSDEEP 6144:PV1L0mAoAb+sbLkAYC5D7T3fT/fTtJE1Ya/PoY:PV1PAoW+svD5XLf9JIYa/QY
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 298KB
- SHA256 7bccfe9c03119443d84f9298d0af6553ae3746ee3a7dfdedee5f33ca9e2f012a
- MD5 c5b51a588ffa8f0f6b7c48d4b99bdaf9
- SHA1 57f6b09163d756a19e4a1e92edeac1858e1d18e9
- SHA512 83dd7ee5fd76224a22ebef36700271b780fcd8a33196e84a13dc3e053b570876cf9147f50675796cf7641ec2472d993c9c5a92392fb2302853da1a83963f1c14
- SSDEEP 6144:PV1L0mAoAb+sbLkAYC5D7T3fT/fTtJE1Ya/PoY:PV1PAoW+svD5XLf9JIYa/QY
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.