General
- Target file.exe
- Size 418KB
- Sample230209-d37b9saa3y
- SHA256 6e396b9e962d71787ca221ebf657edaefbb0adbc50c3698027ea49790bd366a8
- MD5 03fc82a071acc3960971962634b859e6
- SHA1 3d3788355dce9cee1264bd0f93e98e52543811ac
- SHA512 4a0ffcbaa0c98fa18f6d76657663e5fff45d848c21d03cc94f8b02a1478ce0b90ef4b9c345425b0c8469e236ca41713d63db461fd1ca550547594d9bace8e606
- SSDEEP 6144:qMz+LECyCM3r8fh/xYq2xUzMK1Cd1XgZb93lGv8QkeQGSNAUZ:qMGuCX5aq2ywK1YSZbFLQkeiW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 418KB
- SHA256 6e396b9e962d71787ca221ebf657edaefbb0adbc50c3698027ea49790bd366a8
- MD5 03fc82a071acc3960971962634b859e6
- SHA1 3d3788355dce9cee1264bd0f93e98e52543811ac
- SHA512 4a0ffcbaa0c98fa18f6d76657663e5fff45d848c21d03cc94f8b02a1478ce0b90ef4b9c345425b0c8469e236ca41713d63db461fd1ca550547594d9bace8e606
- SSDEEP 6144:qMz+LECyCM3r8fh/xYq2xUzMK1Cd1XgZb93lGv8QkeQGSNAUZ:qMGuCX5aq2ywK1YSZbFLQkeiW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.