General
- Target file.exe
- Size 395KB
- Sample230207-djfp7shb63
- SHA256 0d508393e05d4d39c96b797330f892cedaa7b563a32e36ff6bcd6bc2d6423421
- MD5 7ed61df0773d87197bbe21e0f6d8e5ae
- SHA1 f03e5f08c58922c2f1141b1c83f71334fd158735
- SHA512 e53edcd4fb01c009708035eac4bf1cd09b1cc1fb9396a42a18ebf731dca46c78924a3cfe72c263efb12f20d148a5e05d77cc0d937df711a652e483fc302cdd51
- SSDEEP 6144:ASrL490uvdT4khgpHhzRTNuhtTIb/+SAR3Yu/WZqTuQj9+dJa:xrM2u1TxgxxNNuvGWSGYu/WZqTljOJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 395KB
- SHA256 0d508393e05d4d39c96b797330f892cedaa7b563a32e36ff6bcd6bc2d6423421
- MD5 7ed61df0773d87197bbe21e0f6d8e5ae
- SHA1 f03e5f08c58922c2f1141b1c83f71334fd158735
- SHA512 e53edcd4fb01c009708035eac4bf1cd09b1cc1fb9396a42a18ebf731dca46c78924a3cfe72c263efb12f20d148a5e05d77cc0d937df711a652e483fc302cdd51
- SSDEEP 6144:ASrL490uvdT4khgpHhzRTNuhtTIb/+SAR3Yu/WZqTuQj9+dJa:xrM2u1TxgxxNNuvGWSGYu/WZqTljOJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.