General
- Target file.exe
- Size 477KB
- Sample230211-jcyv4agg33
- SHA256 c57cb4605cfbf8743c85fd0e71f319cfb81c939980152d797d87a97ef3a75afd
- MD5 b06433c42f02e4bec57de7331acdd8fc
- SHA1 8e73cee46ff1422c323f3f8577a98b429746bc53
- SHA512 1a90fdd5685eebef1bf267766b77f84becb76efeb1cf8f63934661432799cf2fe51748f859d61510ea274e1e5ee935c263a87bb69726bd52aaedb57169110e08
- SSDEEP 6144:LSReU9VNYHJoK0eWxye4ZBDs0Rwt6skF6eUkBH/3wHH0AMdkTvZt5:L8AJ524pyt6EEJPWDMdk
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 477KB
- SHA256 c57cb4605cfbf8743c85fd0e71f319cfb81c939980152d797d87a97ef3a75afd
- MD5 b06433c42f02e4bec57de7331acdd8fc
- SHA1 8e73cee46ff1422c323f3f8577a98b429746bc53
- SHA512 1a90fdd5685eebef1bf267766b77f84becb76efeb1cf8f63934661432799cf2fe51748f859d61510ea274e1e5ee935c263a87bb69726bd52aaedb57169110e08
- SSDEEP 6144:LSReU9VNYHJoK0eWxye4ZBDs0Rwt6skF6eUkBH/3wHH0AMdkTvZt5:L8AJ524pyt6EEJPWDMdk
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.