General
- Target file.exe
- Size 298KB
- Sample230204-rb4zqagg9w
- SHA256 8e504b23e591de2e63cb5da50be2ac23bc761cee7c5cf482db4b51abdba99b70
- MD5 8ab33151e80b4ad72c40b7648434c133
- SHA1 8de0556537068cc2b76800d40a23d5cc7659ba97
- SHA512 ed93639d4e404e9e86c9eae7962a671187ebd3a431e67e8e077a432aa8738ed74f7973cdf5e1b17a0ea9bf30e18e3c7bdcf3691d28e9112ed4c2935bfa8ed6ff
- SSDEEP 3072:kiprcj7uPLOzYw4WbZ5GPw8nvudyq7JMCj7tR7yzWRADX6slNJZOIVHHV3lZEWe:kiptLkh4nPln2dF2Cj7tISGBTZ9dEWe
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 298KB
- SHA256 8e504b23e591de2e63cb5da50be2ac23bc761cee7c5cf482db4b51abdba99b70
- MD5 8ab33151e80b4ad72c40b7648434c133
- SHA1 8de0556537068cc2b76800d40a23d5cc7659ba97
- SHA512 ed93639d4e404e9e86c9eae7962a671187ebd3a431e67e8e077a432aa8738ed74f7973cdf5e1b17a0ea9bf30e18e3c7bdcf3691d28e9112ed4c2935bfa8ed6ff
- SSDEEP 3072:kiprcj7uPLOzYw4WbZ5GPw8nvudyq7JMCj7tR7yzWRADX6slNJZOIVHHV3lZEWe:kiptLkh4nPln2dF2Cj7tISGBTZ9dEWe
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.