General
- Target file.exe
- Size 301KB
- Sample230206-bxdfwsfa5t
- SHA256 98c26c61db80a34fc15b3a282a03da11b5f386946661e83e06a96dfd36596ef0
- MD5 a2618a6affbc8eb9fec4ab7d40afcad8
- SHA1 bb752d66312af6aebb2e622a943dd41f2f11da4b
- SHA512 ff83b7a340d4b2f1fc126444f7d04849fafc803937db2b72ef5a082b5fa121598f66e8fcd58f2cdc425c3c585b0734150654fe8ffffe020dbd1457644c81d1bf
- SSDEEP 6144:oHlsDLohJ2RKgd7GPorA9vLpknIiOQDdAMR1frq2Nuj+:oHlsD0hJ21d0orA9j8OQZNjzqGu6
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 301KB
- SHA256 98c26c61db80a34fc15b3a282a03da11b5f386946661e83e06a96dfd36596ef0
- MD5 a2618a6affbc8eb9fec4ab7d40afcad8
- SHA1 bb752d66312af6aebb2e622a943dd41f2f11da4b
- SHA512 ff83b7a340d4b2f1fc126444f7d04849fafc803937db2b72ef5a082b5fa121598f66e8fcd58f2cdc425c3c585b0734150654fe8ffffe020dbd1457644c81d1bf
- SSDEEP 6144:oHlsDLohJ2RKgd7GPorA9vLpknIiOQDdAMR1frq2Nuj+:oHlsD0hJ21d0orA9j8OQZNjzqGu6
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.