General
- Target file.exe
- Size 299KB
- Sample230209-zbveaacc37
- SHA256 995eb63354d330bc029dd5a81c886efc0743cd8cceffa47cdc0d4e8cef1edcf1
- MD5 f2f874379579a71ac3b454118465ccfa
- SHA1 714941bfedb1b91c1d96e4cb71dc3d76faf6f5bd
- SHA512 0e96f181ecbabbd52197987205426edbc55fe4aafee6b2d2292bdaed02d9340dfb9847a3a2fcfc37ebc4d90c251273d0be156f68d727ba27bc0bb97aaf634efe
- SSDEEP 6144:/toW4yRiHLSz4XhKc7zc28HBWEW3RgR2/K+FUyovZJpW:/tox0i+z4XhN7YhWEWBgR2/K++
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 299KB
- SHA256 995eb63354d330bc029dd5a81c886efc0743cd8cceffa47cdc0d4e8cef1edcf1
- MD5 f2f874379579a71ac3b454118465ccfa
- SHA1 714941bfedb1b91c1d96e4cb71dc3d76faf6f5bd
- SHA512 0e96f181ecbabbd52197987205426edbc55fe4aafee6b2d2292bdaed02d9340dfb9847a3a2fcfc37ebc4d90c251273d0be156f68d727ba27bc0bb97aaf634efe
- SSDEEP 6144:/toW4yRiHLSz4XhKc7zc28HBWEW3RgR2/K+FUyovZJpW:/tox0i+z4XhN7YhWEWBgR2/K++
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.