General
- Target file.exe
- Size 389KB
- Sample230205-thb9dsdd6y
- SHA256 8fbe18e11a214838a3faafb76cc01ff88b87697c56fc4590214be791e30fe4f3
- MD5 3d7c4a8465a081acfc864b565f1b11ea
- SHA1 92e8ec896046a50b1377d2ce6c93031116b7dd07
- SHA512 e6a15edf55cdfc2fe2fd72581597973411fdbb954a928e2c04e465e0d4360247d910134bca43838a8655ed4680adea9d139947a9651a30a4c49f7e9dab18691f
- SSDEEP 6144:bjCkUL9KiMktMb5ibEo+zRNw3HAgmfxkanfdkqe5d:bjCkURKrktqfo+Pw3e+afeNL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 389KB
- SHA256 8fbe18e11a214838a3faafb76cc01ff88b87697c56fc4590214be791e30fe4f3
- MD5 3d7c4a8465a081acfc864b565f1b11ea
- SHA1 92e8ec896046a50b1377d2ce6c93031116b7dd07
- SHA512 e6a15edf55cdfc2fe2fd72581597973411fdbb954a928e2c04e465e0d4360247d910134bca43838a8655ed4680adea9d139947a9651a30a4c49f7e9dab18691f
- SSDEEP 6144:bjCkUL9KiMktMb5ibEo+zRNw3HAgmfxkanfdkqe5d:bjCkURKrktqfo+Pw3e+afeNL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.