General
- Target file.exe
- Size 481KB
- Sample230210-w6ltvaef61
- SHA256 4a87855ce2047b2b89f77edbe91a8223f0f4fedf36bd3ebd5ae19017d725bfe1
- MD5 0e5b399ada034834065d5a842ec81d91
- SHA1 5b2c36da67c0b12682d2a3b1706e053af804c5ad
- SHA512 6461d371a64e5577a523778bcbb5d430ac0e90c0f920be1e0f1d2f66a33eaf4c1bad870fed8876d1407220e55d8be639d4d69cf1ebce0720fab465d722555ac8
- SSDEEP 6144:RFCgNq0sy7yRksDnmTm1aQvEvP/juxWwXpYnfWG+Sf:ncy+RXalQ6/ju96nfW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 481KB
- SHA256 4a87855ce2047b2b89f77edbe91a8223f0f4fedf36bd3ebd5ae19017d725bfe1
- MD5 0e5b399ada034834065d5a842ec81d91
- SHA1 5b2c36da67c0b12682d2a3b1706e053af804c5ad
- SHA512 6461d371a64e5577a523778bcbb5d430ac0e90c0f920be1e0f1d2f66a33eaf4c1bad870fed8876d1407220e55d8be639d4d69cf1ebce0720fab465d722555ac8
- SSDEEP 6144:RFCgNq0sy7yRksDnmTm1aQvEvP/juxWwXpYnfWG+Sf:ncy+RXalQ6/ju96nfW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.