General
- Target file.exe
- Size 390KB
- Sample230205-sdwa2adc5z
- SHA256 677db163e1a278f4722d6debde4e306b364dd8f03b8f87270ae67c1eec40be03
- MD5 ec4e9ce757ccd5e973355fbe413e1370
- SHA1 95b017d9d7f77e34ab9cac6fcd89442dd561347a
- SHA512 3058f9c69da21597ddd6078ff77ebe6371a104958a306881965b1ae546d646ac4aa3ace599deffa259ad293bf7dc79b08a28c5fdd5883fd4b4834cc27ba6affa
- SSDEEP 6144:QjujmKLL2VEtM/zogkCFWTTh4Cr7biaS4QHlTxf+VC:QjujpSVEtKz/F8TTh4DaSJlx+VC
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 390KB
- SHA256 677db163e1a278f4722d6debde4e306b364dd8f03b8f87270ae67c1eec40be03
- MD5 ec4e9ce757ccd5e973355fbe413e1370
- SHA1 95b017d9d7f77e34ab9cac6fcd89442dd561347a
- SHA512 3058f9c69da21597ddd6078ff77ebe6371a104958a306881965b1ae546d646ac4aa3ace599deffa259ad293bf7dc79b08a28c5fdd5883fd4b4834cc27ba6affa
- SSDEEP 6144:QjujmKLL2VEtM/zogkCFWTTh4Cr7biaS4QHlTxf+VC:QjujpSVEtKz/F8TTh4DaSJlx+VC
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.