General
- Target file.exe
- Size 388KB
- Sample230204-seflzagh8z
- SHA256 a0eb22ecb0d5658c82d19d67df932896149bc9a5156f11e1605612ffd373d516
- MD5 afe8f71beee2e5678e9edd11bf33a61b
- SHA1 efef6dba6cd8a3dfed3585f955bfb0666ef6df65
- SHA512 26233fb56f702b4d997d972f65748b0c0426f14b5204d57c7a0944fae3f4132806e17994de9b27c61eb7282ccbff28a5bf79e6b64f0c86cbf1af7afe290ee4d4
- SSDEEP 6144:z8ZTwp5L0yutewDIWaL3q0x74dDmhjn/3HwHVu7LkoeGQRYF:AZTko9tfi3hz/3woA
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 388KB
- SHA256 a0eb22ecb0d5658c82d19d67df932896149bc9a5156f11e1605612ffd373d516
- MD5 afe8f71beee2e5678e9edd11bf33a61b
- SHA1 efef6dba6cd8a3dfed3585f955bfb0666ef6df65
- SHA512 26233fb56f702b4d997d972f65748b0c0426f14b5204d57c7a0944fae3f4132806e17994de9b27c61eb7282ccbff28a5bf79e6b64f0c86cbf1af7afe290ee4d4
- SSDEEP 6144:z8ZTwp5L0yutewDIWaL3q0x74dDmhjn/3HwHVu7LkoeGQRYF:AZTko9tfi3hz/3woA
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.