General
- Target file.exe
- Size 298KB
- Sample230204-jw4wfsch29
- SHA256 6c031a0f156aa5e291dac746b8df7cdd6caa5fc2f7f273f0d7782ff99c98b45a
- MD5 b100b49cda91183607ae3a982b126804
- SHA1 050d933f6f061880896620cf5b43a3eb0a294db3
- SHA512 22a4c246865caa81c969133b759fa11e238350f2badbe06cb15800e588bac5a495a5c8db4b3f35d747e837cbd8266ea0c2983f4ea95f98844e04be601fe2d583
- SSDEEP 6144:KJlzLZpot2TZ0RHqcrAtz0j56xdCARoEWa:KJFXoM2xqc0tz0jEx6Y
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 298KB
- SHA256 6c031a0f156aa5e291dac746b8df7cdd6caa5fc2f7f273f0d7782ff99c98b45a
- MD5 b100b49cda91183607ae3a982b126804
- SHA1 050d933f6f061880896620cf5b43a3eb0a294db3
- SHA512 22a4c246865caa81c969133b759fa11e238350f2badbe06cb15800e588bac5a495a5c8db4b3f35d747e837cbd8266ea0c2983f4ea95f98844e04be601fe2d583
- SSDEEP 6144:KJlzLZpot2TZ0RHqcrAtz0j56xdCARoEWa:KJFXoM2xqc0tz0jEx6Y
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.