General
- Target file.exe
- Size 389KB
- Sample230205-czpsdafh69
- SHA256 9345c508148e73ed01deb38869d1fd47a3b1050d93977ea54bdccfed508e7b4f
- MD5 c1f41cb8459264257ecde97e486819ba
- SHA1 26d517ba730299a0c89f097fcb097fd94d5abdbb
- SHA512 76387eed56248233737d995a4e5523084b930453b97173e056e6c4a301b2915dcddc1b28c05d8fe49bed4bf1e673925fc1841536f5378c98b67fb69d263b280b
- SSDEEP 6144:LM6Dw2LTe1TsiWVa8Ct74MlLoLpZ2n2pT2vpv6w/:LM6Dw2Xe1qxCt74MlsLpYzp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 389KB
- SHA256 9345c508148e73ed01deb38869d1fd47a3b1050d93977ea54bdccfed508e7b4f
- MD5 c1f41cb8459264257ecde97e486819ba
- SHA1 26d517ba730299a0c89f097fcb097fd94d5abdbb
- SHA512 76387eed56248233737d995a4e5523084b930453b97173e056e6c4a301b2915dcddc1b28c05d8fe49bed4bf1e673925fc1841536f5378c98b67fb69d263b280b
- SSDEEP 6144:LM6Dw2LTe1TsiWVa8Ct74MlLoLpZ2n2pT2vpv6w/:LM6Dw2Xe1qxCt74MlsLpYzp
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.