General
- Target file.exe
- Size 293KB
- Sample230211-1yb2wsbh65
- SHA256 d27b9f84cca5889719018a8cb306c313009c1801076bbd4ff6e5cebb6e2dfb0a
- MD5 ea72926a1922aeb4bcd5814240a35fde
- SHA1 3ef5a090e1c5892db774f6e408d99e34c931e761
- SHA512 862a92571c815e8cc799088fbd2f08b20ac9fecf9e71a6707c516654da15a20768cc8bb508b68c5fdd95613c93181a72db0428417d21558b4b4c969e3792b584
- SSDEEP 6144:euG0Rel/2iLPawKjnIlx3O3kwrUcT+Jh9Ju0:euGKS2iW5jq+3kw4cT4h
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 293KB
- SHA256 d27b9f84cca5889719018a8cb306c313009c1801076bbd4ff6e5cebb6e2dfb0a
- MD5 ea72926a1922aeb4bcd5814240a35fde
- SHA1 3ef5a090e1c5892db774f6e408d99e34c931e761
- SHA512 862a92571c815e8cc799088fbd2f08b20ac9fecf9e71a6707c516654da15a20768cc8bb508b68c5fdd95613c93181a72db0428417d21558b4b4c969e3792b584
- SSDEEP 6144:euG0Rel/2iLPawKjnIlx3O3kwrUcT+Jh9Ju0:euGKS2iW5jq+3kw4cT4h
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.