General
- Target file.exe
- Size 418KB
- Sample230206-sy682aef42
- SHA256 3eb02f79b52f4fa22c7df52011e1890dd329a4447f292e04ab9f3d4f7f599a91
- MD5 328d800c83bef383466183388b4a5d6f
- SHA1 7f099b688cc5a1302d724511d08c864d867f2999
- SHA512 7adb2c0b56e024070a488d5e9e4a9e839f5c549e096d5b8b86e46069d6f94e3c0474a43dcc6bfeb3e291010b4947e5689a43feafb83621727c7915eddae49bd9
- SSDEEP 12288:l9MYoF5mpY+6fQwAKutjhN5Lcy+0f7mz:lL45kGAK6N5Lplf7
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 418KB
- SHA256 3eb02f79b52f4fa22c7df52011e1890dd329a4447f292e04ab9f3d4f7f599a91
- MD5 328d800c83bef383466183388b4a5d6f
- SHA1 7f099b688cc5a1302d724511d08c864d867f2999
- SHA512 7adb2c0b56e024070a488d5e9e4a9e839f5c549e096d5b8b86e46069d6f94e3c0474a43dcc6bfeb3e291010b4947e5689a43feafb83621727c7915eddae49bd9
- SSDEEP 12288:l9MYoF5mpY+6fQwAKutjhN5Lcy+0f7mz:lL45kGAK6N5Lplf7
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.