General
- Target file.exe
- Size 301KB
- Sample230208-d22emaha56
- SHA256 e79bfb9ec3a68be43aef326116c9ced35faadb8c0870dcc139fcfd051cc67c65
- MD5 5dbdc0fb43ee86563703977d49f7b1f0
- SHA1 63d42c71e5ae71616ee5e1951f71bf0b9eb1112b
- SHA512 7c1547120103398617c160e6359ab089c616e3301d0e378e2e438689f8eaa630d6cd3af1c6c965a26aa108b6db19bf48d1f7b3cf8daa2bbf1056799387eb9709
- SSDEEP 6144:xfssneLkjmESBz0lRx4tnIo475oAKfl0Opa8pBQOLSC:xfssneYjmEc4Gt2aZl0wa8pBQ0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 301KB
- SHA256 e79bfb9ec3a68be43aef326116c9ced35faadb8c0870dcc139fcfd051cc67c65
- MD5 5dbdc0fb43ee86563703977d49f7b1f0
- SHA1 63d42c71e5ae71616ee5e1951f71bf0b9eb1112b
- SHA512 7c1547120103398617c160e6359ab089c616e3301d0e378e2e438689f8eaa630d6cd3af1c6c965a26aa108b6db19bf48d1f7b3cf8daa2bbf1056799387eb9709
- SSDEEP 6144:xfssneLkjmESBz0lRx4tnIo475oAKfl0Opa8pBQOLSC:xfssneYjmEc4Gt2aZl0wa8pBQ0
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.