General
- Target file.exe
- Size 388KB
- Sample230205-n7fefsce5y
- SHA256 dcecfe61cd34210ef2bf62b447489a9b9a74a1d275f2609ee4959fe46b1e7087
- MD5 1c33bfdb724960bef0d068dbf0f49351
- SHA1 e6585a5ac24dc526c8a450d99d9b3c8d984810f5
- SHA512 f89a3e87e3738dadf88a5e45f2ca0589f7e98d73e969953a000f53f86fa88156fd817c7c83cca48a2e935ca711070d05f7cb6b832a961d27ea9d004ab63ac6e1
- SSDEEP 6144:VgTUYxLHLAGSF7wZhOCCXSJz9UPsubSmAio1oo1Nh:VgTUYxLHcGU7wZhONCzvubSso1
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 388KB
- SHA256 dcecfe61cd34210ef2bf62b447489a9b9a74a1d275f2609ee4959fe46b1e7087
- MD5 1c33bfdb724960bef0d068dbf0f49351
- SHA1 e6585a5ac24dc526c8a450d99d9b3c8d984810f5
- SHA512 f89a3e87e3738dadf88a5e45f2ca0589f7e98d73e969953a000f53f86fa88156fd817c7c83cca48a2e935ca711070d05f7cb6b832a961d27ea9d004ab63ac6e1
- SSDEEP 6144:VgTUYxLHLAGSF7wZhOCCXSJz9UPsubSmAio1oo1Nh:VgTUYxLHcGU7wZhONCzvubSso1
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.