General
- Target file.exe
- Size 480KB
- Sample230210-3kexqsbd3s
- SHA256 b4d8ec8943f90e3b7ef2ec7cc604fffc86086f521628ae2bd29a9b89fc3a9999
- MD5 9df54599a912c657cda37397cd0155a3
- SHA1 cf79c045b3e145329d1958020cc16962484d3e1c
- SHA512 a24a911a87fd50f239ab48a0ec3eb9e3c654ae7aecd7fc8deb9da1a2bb70ccd64b7e94d21decfec38a630c6054cf5281b85c5b876c0c1bed9c2620b8e4f2f57a
- SSDEEP 6144:Ju52SSjehS978y3L9eTalmJWIDozZEMjCfnfW5:JCS978y3YmlmzDozZEHfnfW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 480KB
- SHA256 b4d8ec8943f90e3b7ef2ec7cc604fffc86086f521628ae2bd29a9b89fc3a9999
- MD5 9df54599a912c657cda37397cd0155a3
- SHA1 cf79c045b3e145329d1958020cc16962484d3e1c
- SHA512 a24a911a87fd50f239ab48a0ec3eb9e3c654ae7aecd7fc8deb9da1a2bb70ccd64b7e94d21decfec38a630c6054cf5281b85c5b876c0c1bed9c2620b8e4f2f57a
- SSDEEP 6144:Ju52SSjehS978y3L9eTalmJWIDozZEMjCfnfW5:JCS978y3YmlmzDozZEHfnfW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.