General
- Target file.exe
- Size 453KB
- Sample230210-nna1maeb76
- SHA256 23f60d5853578489761ea850c9dc502d031abb9a4a873ca8bb971fa5c6fb080c
- MD5 b0a0cec3b7f719c0761f8549c317fb37
- SHA1 283fe8464e12a6f79244f488c17041b731151ff1
- SHA512 ed1d720af0776ac4ffd40b6611a6dcbb94f70132c006af60276e0556ca6c0611e510aa1f7f90e78f281436ec31bd63f7883cccc9adf3f9f1ab813b73f61e1faa
- SSDEEP 6144:Y9eHa+EQ//qp3hRW0C2wm4HPH41ODXvrnqZAvqSvAJnfWIT/:Y8/hUxUiwm4vzDXvLqyv3AnfWo/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 453KB
- SHA256 23f60d5853578489761ea850c9dc502d031abb9a4a873ca8bb971fa5c6fb080c
- MD5 b0a0cec3b7f719c0761f8549c317fb37
- SHA1 283fe8464e12a6f79244f488c17041b731151ff1
- SHA512 ed1d720af0776ac4ffd40b6611a6dcbb94f70132c006af60276e0556ca6c0611e510aa1f7f90e78f281436ec31bd63f7883cccc9adf3f9f1ab813b73f61e1faa
- SSDEEP 6144:Y9eHa+EQ//qp3hRW0C2wm4HPH41ODXvrnqZAvqSvAJnfWIT/:Y8/hUxUiwm4vzDXvLqyv3AnfWo/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.