General
- Target file.exe
- Size 481KB
- Sample230211-bdsrgagb8t
- SHA256 2fdde89879da643eb009debaa873937898ea13f577411f4d25121a782b0e60d0
- MD5 f701b700809b07c32d428cc19679a441
- SHA1 30c2aba0d2176191e673ed25e5d4e263bbf5db9d
- SHA512 f343818cbfbaeec9a81fbf0212036c76bc68438dcd70bcaf5ae54bc1d2d5039661ce6bee64baa3b255213a76dbae35080314e2869bf8b530b5515cc9e1f645f2
- SSDEEP 6144:IQdMdhObznmBoDM5IDgiM8jzg1VqP4KLi0qxhkh8NMdkT73Zt5C:IgrmoyiMSIqP4HhkWNMdk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 481KB
- SHA256 2fdde89879da643eb009debaa873937898ea13f577411f4d25121a782b0e60d0
- MD5 f701b700809b07c32d428cc19679a441
- SHA1 30c2aba0d2176191e673ed25e5d4e263bbf5db9d
- SHA512 f343818cbfbaeec9a81fbf0212036c76bc68438dcd70bcaf5ae54bc1d2d5039661ce6bee64baa3b255213a76dbae35080314e2869bf8b530b5515cc9e1f645f2
- SSDEEP 6144:IQdMdhObznmBoDM5IDgiM8jzg1VqP4KLi0qxhkh8NMdkT73Zt5C:IgrmoyiMSIqP4HhkWNMdk
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.