General
- Target file.exe
- Size 298KB
- Sample230204-nmpsdsge4s
- SHA256 d433481a5ec4b4445828802f528b19d54f9be76561c1386e0a458a1ccf2e034a
- MD5 db7d8fa729fd164ca2a5794341058995
- SHA1 dae40301699f4bfec6eb5e673da2d2fc786ce40e
- SHA512 94ce5b29dfeaee7b9ce209c8a755b4a0a01284d1a68eabd83fb7ea5a375e69be333401440bb753c3dd747ec32ef802687a9d2d1c09317738685d46b7ce86a2c6
- SSDEEP 6144:4bdLWlXX916xfF6NfUp2NjJdyLgEzAsStlmJTmKHY:4bdeXN/Nf0O9dagEsZOp4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 298KB
- SHA256 d433481a5ec4b4445828802f528b19d54f9be76561c1386e0a458a1ccf2e034a
- MD5 db7d8fa729fd164ca2a5794341058995
- SHA1 dae40301699f4bfec6eb5e673da2d2fc786ce40e
- SHA512 94ce5b29dfeaee7b9ce209c8a755b4a0a01284d1a68eabd83fb7ea5a375e69be333401440bb753c3dd747ec32ef802687a9d2d1c09317738685d46b7ce86a2c6
- SSDEEP 6144:4bdLWlXX916xfF6NfUp2NjJdyLgEzAsStlmJTmKHY:4bdeXN/Nf0O9dagEsZOp4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.