General
- Target file.exe
- Size 481KB
- Sample230210-yrjgaaaa4y
- SHA256 1dde976ad044a06bbefd85c57330071aaff2af1ffe301821996b98580e1896be
- MD5 cdd316478bc8a548c78d87885f317179
- SHA1 46ced1661d83289642b501003fd8a817dcebaa7d
- SHA512 406ef55af19c124fba816c8eb15987d80783adde6607cb666b7406fd0b2504e6463534e699764eb0ff4de43b3ca84ab5a6ddc5a74cee044728718944bb0659e6
- SSDEEP 6144:hLjRpnjzJrIx6vOOHD0r4insfffP6EuFeRJ55bnfWW:hTjYaOOS4insfffiEuEnnfW
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 481KB
- SHA256 1dde976ad044a06bbefd85c57330071aaff2af1ffe301821996b98580e1896be
- MD5 cdd316478bc8a548c78d87885f317179
- SHA1 46ced1661d83289642b501003fd8a817dcebaa7d
- SHA512 406ef55af19c124fba816c8eb15987d80783adde6607cb666b7406fd0b2504e6463534e699764eb0ff4de43b3ca84ab5a6ddc5a74cee044728718944bb0659e6
- SSDEEP 6144:hLjRpnjzJrIx6vOOHD0r4insfffP6EuFeRJ55bnfWW:hTjYaOOS4insfffiEuEnnfW
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.