General
- Target file.exe
- Size 301KB
- Sample230205-2fcq5see5s
- SHA256 54a98dc7b439995e463b85432bb993b6d93349bf5f6b02b464dcafcd97d8568d
- MD5 4a339395e53cb21f0d361bcb543746bf
- SHA1 31bcefb6cdf30fa56cc44d993dc1bfe4c3cfaf3e
- SHA512 5bd6752e89e71e2688d39f16130652799dc768a12dd34eddbaec7c59867620c4b16f9cbb0bb3a401b4feb63aa8e7436e68b3f9295d044b31c16dde96e295d3ed
- SSDEEP 6144:IaK9hAWnuoLbCZQB0TmJ6GjlOBdPISWv1iTnxkrx2JClluf0e8:IaKcWnuonCZQwmJ6GMBlISs1iTxkrcYU
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 301KB
- SHA256 54a98dc7b439995e463b85432bb993b6d93349bf5f6b02b464dcafcd97d8568d
- MD5 4a339395e53cb21f0d361bcb543746bf
- SHA1 31bcefb6cdf30fa56cc44d993dc1bfe4c3cfaf3e
- SHA512 5bd6752e89e71e2688d39f16130652799dc768a12dd34eddbaec7c59867620c4b16f9cbb0bb3a401b4feb63aa8e7436e68b3f9295d044b31c16dde96e295d3ed
- SSDEEP 6144:IaK9hAWnuoLbCZQB0TmJ6GjlOBdPISWv1iTnxkrx2JClluf0e8:IaKcWnuonCZQwmJ6GMBlISs1iTxkrcYU
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.