General
- Target file.exe
- Size 453KB
- Sample230210-tgryfshd62
- SHA256 33bea9f8920829ecebf80b2b3e2f9774cab289434fd4ccb7ed4dae000cefcc50
- MD5 24e7ed9ef269d5092572bb0878b01d79
- SHA1 cbf9423a248a3fd31de00f2ff5eab6064aed6374
- SHA512 10492ce14575d3556dc7153d373fb2b82e36d1f4591491e5c238ab47680d8e27884f3cbe8652393d33524d4a22f1ca47d62115d771d17aebe30afea646753b43
- SSDEEP 6144:JQ/qaWGWbx7ul3pJ6Vlo2NJbSZmEeV1aMqj2Ytzkl5nfWCo:JymIXJsbJgmEeV8/vkl5nfW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 453KB
- SHA256 33bea9f8920829ecebf80b2b3e2f9774cab289434fd4ccb7ed4dae000cefcc50
- MD5 24e7ed9ef269d5092572bb0878b01d79
- SHA1 cbf9423a248a3fd31de00f2ff5eab6064aed6374
- SHA512 10492ce14575d3556dc7153d373fb2b82e36d1f4591491e5c238ab47680d8e27884f3cbe8652393d33524d4a22f1ca47d62115d771d17aebe30afea646753b43
- SSDEEP 6144:JQ/qaWGWbx7ul3pJ6Vlo2NJbSZmEeV1aMqj2Ytzkl5nfWCo:JymIXJsbJgmEeV8/vkl5nfW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.