General
- Target file.exe
- Size 299KB
- Sample230210-fn5agahe63
- SHA256 e1fd1ff6b48c32ef098e7c1f94e0df8aa6838f7d8f6caf13ebf88abab4508c3f
- MD5 515192a499bab1cfc5205f848cfe5d30
- SHA1 556d587959ee67002b9ac118e85386d6eea94956
- SHA512 2f45e25db31473506b486accac379e6ce15171f8fc773713a81b1390a399d4308b5b3564f06b0edc51c3059434a966bf03c91e4f074cb4fbf649a306606ec883
- SSDEEP 6144:D2+ZqKRMNWB/NE3Y//WWa7u+XP039YNZRvIUWYpjbBt/eY1Lo:D2+k8Mm/NE3Y/eWaKghNj3T
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 299KB
- SHA256 e1fd1ff6b48c32ef098e7c1f94e0df8aa6838f7d8f6caf13ebf88abab4508c3f
- MD5 515192a499bab1cfc5205f848cfe5d30
- SHA1 556d587959ee67002b9ac118e85386d6eea94956
- SHA512 2f45e25db31473506b486accac379e6ce15171f8fc773713a81b1390a399d4308b5b3564f06b0edc51c3059434a966bf03c91e4f074cb4fbf649a306606ec883
- SSDEEP 6144:D2+ZqKRMNWB/NE3Y//WWa7u+XP039YNZRvIUWYpjbBt/eY1Lo:D2+k8Mm/NE3Y/eWaKghNj3T
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.