General
- Target file.exe
- Size 418KB
- Sample230209-bc75rsda63
- SHA256 ba06dbb9474f3051a6f5ea7c7cec3fa103d2f764d59ff1b67f1d5456e0e142a1
- MD5 6c92aa5416ef0b1d384651e6e39f0f9a
- SHA1 292a3bc12423bd6d003a7e6efcae5f724af1c9e9
- SHA512 e27a5f293fc75a39c628bfba8ffab898767490b5d47cee8cd53c677a0969df50b97baf52ecab78f2e5ffcdb5ae1becedcd583afba0b007a85ce6c94763e38a1d
- SSDEEP 6144:kMaPnA55h6aecejp9mwy2R1HsYxBExXZVsMw4QkeQGSmF:kMwny+lceXmnm1pxBExbswQkei
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 418KB
- SHA256 ba06dbb9474f3051a6f5ea7c7cec3fa103d2f764d59ff1b67f1d5456e0e142a1
- MD5 6c92aa5416ef0b1d384651e6e39f0f9a
- SHA1 292a3bc12423bd6d003a7e6efcae5f724af1c9e9
- SHA512 e27a5f293fc75a39c628bfba8ffab898767490b5d47cee8cd53c677a0969df50b97baf52ecab78f2e5ffcdb5ae1becedcd583afba0b007a85ce6c94763e38a1d
- SSDEEP 6144:kMaPnA55h6aecejp9mwy2R1HsYxBExXZVsMw4QkeQGSmF:kMwny+lceXmnm1pxBExbswQkei
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.