General
- Target file.exe
- Size 389KB
- Sample230205-emcndsgb66
- SHA256 441378e2d3b2a4fb095949c66eb977254ca60d038b4dd2c18ad06bdebf147152
- MD5 2b23cea0285d0cb5a476c6b1199582f0
- SHA1 d1dfca3d0b6772a3ab7966e12c1a8d2c775fc83a
- SHA512 f31a25b299933806b6d62b7aa31aee5b972ac3f94a2dcd0fd81459e5f14eb67a17ff84c788307d395f88bec4a0a6a3c4ca72dfe1a3f0a07865934ecf6c49acad
- SSDEEP 6144:RMfQ/kQLFbfNZssKwEV3dHO7tJCEgcTEcxzD2SBE:RMfQ/3pbfNGhzdHCCETYL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 389KB
- SHA256 441378e2d3b2a4fb095949c66eb977254ca60d038b4dd2c18ad06bdebf147152
- MD5 2b23cea0285d0cb5a476c6b1199582f0
- SHA1 d1dfca3d0b6772a3ab7966e12c1a8d2c775fc83a
- SHA512 f31a25b299933806b6d62b7aa31aee5b972ac3f94a2dcd0fd81459e5f14eb67a17ff84c788307d395f88bec4a0a6a3c4ca72dfe1a3f0a07865934ecf6c49acad
- SSDEEP 6144:RMfQ/kQLFbfNZssKwEV3dHO7tJCEgcTEcxzD2SBE:RMfQ/3pbfNGhzdHCCETYL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.