General
-
Target
file.exe
-
Size
396KB
-
Sample
230206-w6lh3sae6v
-
MD5
945326ba9b7e9bc9989e0c807a6e769c
-
SHA1
3a61b1645981d873638f7f37149c93af5eb8c58b
-
SHA256
e4a634fa4b8411ead4dc604dac55e1f56d1db5377568be143b938967d86f8761
-
SHA512
3c2f8d195a7024d67ef012204f7a31eb9ec7c49ca33bcf3bae200fe78a428a68f6ed2175f1218fc1ca214356f1ef09a62c465a270e3eaec63bfae8c28f3272ed
-
SSDEEP
6144:CPUHoLr7CkAC1mByp4z7I6c2TDCS8PnZ8PVOIuQj93Ta:CMI/WVTBy+PW2Y8Pljh
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
396KB
-
MD5
945326ba9b7e9bc9989e0c807a6e769c
-
SHA1
3a61b1645981d873638f7f37149c93af5eb8c58b
-
SHA256
e4a634fa4b8411ead4dc604dac55e1f56d1db5377568be143b938967d86f8761
-
SHA512
3c2f8d195a7024d67ef012204f7a31eb9ec7c49ca33bcf3bae200fe78a428a68f6ed2175f1218fc1ca214356f1ef09a62c465a270e3eaec63bfae8c28f3272ed
-
SSDEEP
6144:CPUHoLr7CkAC1mByp4z7I6c2TDCS8PnZ8PVOIuQj93Ta:CMI/WVTBy+PW2Y8Pljh
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-