General
- Target file.exe
- Size 388KB
- Sample230204-zcep8aee58
- SHA256 005ecef22c9d3efe8d775e29d02e78cfec2792f6b5a3fc04a7dc3d4c74b51ef8
- MD5 2493707c0ac2088517d2b3e47a3422ad
- SHA1 d6889c3fc4da08eb27a697169d4c526686482a25
- SHA512 f3a18155f47223933046952e8d911aa46333d5383e55dc8e6b037a4d9b70a8f36bb1ba6e42db27ab9b286f4600a2e1f29f0448ca84cb8dd53bd04b621a1a34ad
- SSDEEP 6144:u1dAkz6LqDDYpEf4yFFwP4KEcXAItZ0qWx0ruvNT4Rn:u1dksDlfJXk4KbACcx0CF4
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 388KB
- SHA256 005ecef22c9d3efe8d775e29d02e78cfec2792f6b5a3fc04a7dc3d4c74b51ef8
- MD5 2493707c0ac2088517d2b3e47a3422ad
- SHA1 d6889c3fc4da08eb27a697169d4c526686482a25
- SHA512 f3a18155f47223933046952e8d911aa46333d5383e55dc8e6b037a4d9b70a8f36bb1ba6e42db27ab9b286f4600a2e1f29f0448ca84cb8dd53bd04b621a1a34ad
- SSDEEP 6144:u1dAkz6LqDDYpEf4yFFwP4KEcXAItZ0qWx0ruvNT4Rn:u1dksDlfJXk4KbACcx0CF4
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.