General
- Target file.exe
- Size 293KB
- Sample230211-1dletsbb87
- SHA256 af06f59cd699654153f72d9ebecba6fd718b7261c23d74aad8e751fe32e78c63
- MD5 a4dde1ee83d9b79459c620e4c598d2bf
- SHA1 9b598070d888464cd3734634d4da5aeb94db3570
- SHA512 f1ac4bfbbe9cd22f9c37068b445c1c016a632d873c2ba1699676982407a179a83cc658ac49b4a4a9481b9bfad015044921bb2cd9cc8be075e9ed74dba68fe12f
- SSDEEP 3072:Sjq+v+0JTVS5CPdapFndivtpzw+WVVCRK8Sy6QbV2cB2jMfp9pjtsyXtG:SGGRfgpFnGth9SJet2Ar5
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 293KB
- SHA256 af06f59cd699654153f72d9ebecba6fd718b7261c23d74aad8e751fe32e78c63
- MD5 a4dde1ee83d9b79459c620e4c598d2bf
- SHA1 9b598070d888464cd3734634d4da5aeb94db3570
- SHA512 f1ac4bfbbe9cd22f9c37068b445c1c016a632d873c2ba1699676982407a179a83cc658ac49b4a4a9481b9bfad015044921bb2cd9cc8be075e9ed74dba68fe12f
- SSDEEP 3072:Sjq+v+0JTVS5CPdapFndivtpzw+WVVCRK8Sy6QbV2cB2jMfp9pjtsyXtG:SGGRfgpFnGth9SJet2Ar5
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.