General
- Target file.exe
- Size 417KB
- Sample230208-rwva1sbf96
- SHA256 84dc02e7536e6e43ecf9b93a842ed9c878ebb270bef654ab2cf4ea5dea8435d1
- MD5 313b09ed469f7a7291b7f3168bdec9fc
- SHA1 0d22e457307b44e57b1b8c6dfcf5eb7b4f7f1272
- SHA512 2d4b4b6f11cdc8cf8b2b7981ae3fc6c0c8ad712a4a750f2080f0c44ab8d6eed4463e9c4ce8c87254bd5a79e678c4650e7f62cea10b4b118b8439b13c7df6bbdf
- SSDEEP 6144:2es6OcZvQY7fDkK2z8gwU78+ssDVWb7MbW8m9vZLgtKB+:2f6O2I8hMbn68uZLgtn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 417KB
- SHA256 84dc02e7536e6e43ecf9b93a842ed9c878ebb270bef654ab2cf4ea5dea8435d1
- MD5 313b09ed469f7a7291b7f3168bdec9fc
- SHA1 0d22e457307b44e57b1b8c6dfcf5eb7b4f7f1272
- SHA512 2d4b4b6f11cdc8cf8b2b7981ae3fc6c0c8ad712a4a750f2080f0c44ab8d6eed4463e9c4ce8c87254bd5a79e678c4650e7f62cea10b4b118b8439b13c7df6bbdf
- SSDEEP 6144:2es6OcZvQY7fDkK2z8gwU78+ssDVWb7MbW8m9vZLgtKB+:2f6O2I8hMbn68uZLgtn
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.