General
- Target file.exe
- Size 419KB
- Sample230209-c1wmbagb79
- SHA256 096bb6df85abd72e1cdc2e2cbde27630736203f70b84c7242d233cc11845782f
- MD5 6c52c9ec979fbc2d10b27bb32f709297
- SHA1 6bcccb7726803bda734bc7789a54033c90dd4b2d
- SHA512 60b42b812268a5672be2f47d9689f45e209dd722647f07d769d60fcae89f5212ef8f6b7ce2da078edcad562d8f4e4f2f357144615be486979e69f9c0ba053cba
- SSDEEP 6144:0M1LoEc16tlaVz/OIUEsHNnutE4G6KueJgIQkeQGScL:0Mar1MnEsHRX4a16IQkeic
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 419KB
- SHA256 096bb6df85abd72e1cdc2e2cbde27630736203f70b84c7242d233cc11845782f
- MD5 6c52c9ec979fbc2d10b27bb32f709297
- SHA1 6bcccb7726803bda734bc7789a54033c90dd4b2d
- SHA512 60b42b812268a5672be2f47d9689f45e209dd722647f07d769d60fcae89f5212ef8f6b7ce2da078edcad562d8f4e4f2f357144615be486979e69f9c0ba053cba
- SSDEEP 6144:0M1LoEc16tlaVz/OIUEsHNnutE4G6KueJgIQkeQGScL:0Mar1MnEsHRX4a16IQkeic
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.