General
- Target file.exe
- Size 301KB
- Sample230208-c2fbqagc7t
- SHA256 a77bcaa2621643cf9929fc1d89bb94002a057f79cb9f06aa8f1f608e1404d3d8
- MD5 de3fe6a5705ae7953ee1184dfd3fded1
- SHA1 2d67dde0223f15b94b6e518111fedeb3a41d0265
- SHA512 f327d9814bef0d27de68508e2dc57bd79fdee827844ca7a469069a14eab52c6fa3e68f41ad85e54cfb868ffca16674c0801eb1693df767dc442a9eebd2382281
- SSDEEP 6144:TfIcUAbLsOOb7PfHUdfiPPbZ1PxcibttPv0w+HNrtm:TfIcBb4OYP8ZcTFJMHtY
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 301KB
- SHA256 a77bcaa2621643cf9929fc1d89bb94002a057f79cb9f06aa8f1f608e1404d3d8
- MD5 de3fe6a5705ae7953ee1184dfd3fded1
- SHA1 2d67dde0223f15b94b6e518111fedeb3a41d0265
- SHA512 f327d9814bef0d27de68508e2dc57bd79fdee827844ca7a469069a14eab52c6fa3e68f41ad85e54cfb868ffca16674c0801eb1693df767dc442a9eebd2382281
- SSDEEP 6144:TfIcUAbLsOOb7PfHUdfiPPbZ1PxcibttPv0w+HNrtm:TfIcBb4OYP8ZcTFJMHtY
- MD5 SHA1 SHA512 SSDEEP
Score10/10RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
RedLine payload
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.