General
- Target file.exe
- Size 291KB
- Sample230209-rbjnsaef88
- SHA256 de38c33b82b3d3594de4d8de25f377976a849db18b08ab2a345ef54d53fb7a29
- MD5 2f2aaca4c7f7419806e6a75e1505c401
- SHA1 974b04b06856e4bebdf8c90d49205ab364f96b48
- SHA512 eb9e2b36aae950e26e4e1ee009a2f4ad230018408b3f29b3e45a938d6f403881cf0cdc659bd823e0a9f65c5f553ebfc4f85243020180393a87e755d362184905
- SSDEEP 6144:jflBWylkJAVp6KRF9U7+JvuJwN8a4ihfexIyBSaYGruuyXRwh:jfFlkJIpPbE8vuJA8Pmmx5SwrDm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 291KB
- SHA256 de38c33b82b3d3594de4d8de25f377976a849db18b08ab2a345ef54d53fb7a29
- MD5 2f2aaca4c7f7419806e6a75e1505c401
- SHA1 974b04b06856e4bebdf8c90d49205ab364f96b48
- SHA512 eb9e2b36aae950e26e4e1ee009a2f4ad230018408b3f29b3e45a938d6f403881cf0cdc659bd823e0a9f65c5f553ebfc4f85243020180393a87e755d362184905
- SSDEEP 6144:jflBWylkJAVp6KRF9U7+JvuJwN8a4ihfexIyBSaYGruuyXRwh:jfFlkJIpPbE8vuJA8Pmmx5SwrDm
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.