General
- Target file.exe
- Size 418KB
- Sample230208-v4b17ach7w
- SHA256 204bc8ad0aa52de00a499b7c950119455f333952b0ade8b5de0267917b044897
- MD5 23957566ac74d2a7232e9179f0fe268f
- SHA1 752717de9a8bb477662272a7a931bc5f7a045501
- SHA512 aa110414e38ee4bf2a16351331d9f75897d96533d4aa6d8ea86d47cf1fe14bd485663994c545bb5d672b3926d4108f90b3146c180ad3c610e4653500ea77ad96
- SSDEEP 6144:nHbrQd/8Yrv4mVks8EFBD0aSo1Z0M72GTZTExqwgwtLiqldQv:n7sd/bf/8EPYLE/7dTKxqnwN/dg
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 418KB
- SHA256 204bc8ad0aa52de00a499b7c950119455f333952b0ade8b5de0267917b044897
- MD5 23957566ac74d2a7232e9179f0fe268f
- SHA1 752717de9a8bb477662272a7a931bc5f7a045501
- SHA512 aa110414e38ee4bf2a16351331d9f75897d96533d4aa6d8ea86d47cf1fe14bd485663994c545bb5d672b3926d4108f90b3146c180ad3c610e4653500ea77ad96
- SSDEEP 6144:nHbrQd/8Yrv4mVks8EFBD0aSo1Z0M72GTZTExqwgwtLiqldQv:n7sd/bf/8EPYLE/7dTKxqnwN/dg
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.