General
- Target file.exe
- Size 454KB
- Sample230210-mkdrnsaf91
- SHA256 aabfb8f93787c9a79b570765aef8fb21c6de596c552eb597c23a88bb095b5045
- MD5 a1c18bda24cb41401dd3a65ee234e1b6
- SHA1 8603e6b035dce6538ecb56c8b0d416058786b2a2
- SHA512 c2240c1479c1ecf090afb3e515a5adfa754edec8b675c5376c1855b311fad348fac3347dc1511b8a7db104a8de88824de596935b37183c28404a4322d67f634d
- SSDEEP 6144:HQ5qaa8+1ZayBL0dJAOK17h5+eBn4IItatzoAq6Qv4RynfWAncoUA/:HYqlZvQFK1Vb4vatsLQcnfWUX/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 454KB
- SHA256 aabfb8f93787c9a79b570765aef8fb21c6de596c552eb597c23a88bb095b5045
- MD5 a1c18bda24cb41401dd3a65ee234e1b6
- SHA1 8603e6b035dce6538ecb56c8b0d416058786b2a2
- SHA512 c2240c1479c1ecf090afb3e515a5adfa754edec8b675c5376c1855b311fad348fac3347dc1511b8a7db104a8de88824de596935b37183c28404a4322d67f634d
- SSDEEP 6144:HQ5qaa8+1ZayBL0dJAOK17h5+eBn4IItatzoAq6Qv4RynfWAncoUA/:HYqlZvQFK1Vb4vatsLQcnfWUX/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.