General
- Target file.exe
- Size 300KB
- Sample230207-1c2enafb5y
- SHA256 fc44f0279915ff22fb68ea7d761cd86c9ad770dccf87e400ea1ccf73f1bb9f43
- MD5 99979b5b5ab72cbe46f4478c2c5f4010
- SHA1 ea8fc3caa6e601bd39e657153ebfeb52f34a24b1
- SHA512 15441d87db1b05c212f1763ea0aa6e2a9cdb578d3edfeea32171314c91e3a1fa8095cb833c3171dea14539e9ad0c09f1692070e767c4ab3a65be4230bfdd4afd
- SSDEEP 6144:pdSvmiLnDo0t6xLmZ0y1hShM21WqTkbl/4+u:pdSvmibDhISr2ghu
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 300KB
- SHA256 fc44f0279915ff22fb68ea7d761cd86c9ad770dccf87e400ea1ccf73f1bb9f43
- MD5 99979b5b5ab72cbe46f4478c2c5f4010
- SHA1 ea8fc3caa6e601bd39e657153ebfeb52f34a24b1
- SHA512 15441d87db1b05c212f1763ea0aa6e2a9cdb578d3edfeea32171314c91e3a1fa8095cb833c3171dea14539e9ad0c09f1692070e767c4ab3a65be4230bfdd4afd
- SSDEEP 6144:pdSvmiLnDo0t6xLmZ0y1hShM21WqTkbl/4+u:pdSvmibDhISr2ghu
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.