General
- Target file.exe
- Size 395KB
- Sample230207-ek8m2shc76
- SHA256 fc311b42a5e6430bdd1e16913ebf1027deefb6ce28ce29a5a0524b97ccda9cb3
- MD5 20d78fee05f2b1a78ec3e4afb4f66014
- SHA1 9da8146f201b568752186870b5bb69f122119914
- SHA512 858f30fe8b0c9ba0f2dc30aa22818556cfc6e0c8d197f34eb0b50ac4f4075dda9ca919181fbc29744ec400794c882dcac43ebff122157b991b33780fb20c2dce
- SSDEEP 6144:pLCfLROIML/5EKckbyty4GzNgmIeebJ1u6VI4CGuQj9Bb5a:Zwlbc/5FnygrRgneevjntljft
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 395KB
- SHA256 fc311b42a5e6430bdd1e16913ebf1027deefb6ce28ce29a5a0524b97ccda9cb3
- MD5 20d78fee05f2b1a78ec3e4afb4f66014
- SHA1 9da8146f201b568752186870b5bb69f122119914
- SHA512 858f30fe8b0c9ba0f2dc30aa22818556cfc6e0c8d197f34eb0b50ac4f4075dda9ca919181fbc29744ec400794c882dcac43ebff122157b991b33780fb20c2dce
- SSDEEP 6144:pLCfLROIML/5EKckbyty4GzNgmIeebJ1u6VI4CGuQj9Bb5a:Zwlbc/5FnygrRgneevjntljft
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.