General
- Target file.exe
- Size 291KB
- Sample230209-sdvz9sgf7s
- SHA256 2cde212b3f8a95fe2a1b2ddf659e3461b98cdb4fc9f7410850c5f06dee7cf03e
- MD5 9c89a63889bdaf2bbcc92b91b65fdd6c
- SHA1 7ab9aa382c65faadb5d0da4763be46ad390e6bea
- SHA512 851613c93ae61d73154830ab268de7705f639e697f461a6b371e9cd0a930f1f34b22f059fea592e48de0827f5159f055f5f2089cd7a0e4aeffa18032079398af
- SSDEEP 6144:5fctuOaHPBLu/u+z0XCTRLrwZFTVq0UIbT/8OsWLOyNsd:5fkaHJLQD0SlLrwDVBPbTbHL
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 291KB
- SHA256 2cde212b3f8a95fe2a1b2ddf659e3461b98cdb4fc9f7410850c5f06dee7cf03e
- MD5 9c89a63889bdaf2bbcc92b91b65fdd6c
- SHA1 7ab9aa382c65faadb5d0da4763be46ad390e6bea
- SHA512 851613c93ae61d73154830ab268de7705f639e697f461a6b371e9cd0a930f1f34b22f059fea592e48de0827f5159f055f5f2089cd7a0e4aeffa18032079398af
- SSDEEP 6144:5fctuOaHPBLu/u+z0XCTRLrwZFTVq0UIbT/8OsWLOyNsd:5fkaHJLQD0SlLrwDVBPbTbHL
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.