General
- Target file.exe
- Size 469KB
- Sample230211-lh7fjaeb28
- SHA256 2de6202594d99f797bd810db9d39efae3d9662861f4becc0d462884df0e8b793
- MD5 a78ba57b693d07b3f6e3e3243e5e781a
- SHA1 a397741da1a9e27c82cb5a4fc290cc31af3af4a9
- SHA512 3569bc002b86ddd445ade77df60d288fb1c7f73126bac078a451fda364bff9456ca18e411630517540d170050882c74c740f57a3a30e18797420ab319f1cd293
- SSDEEP 6144:eBxmR8AVNZiuOJvB0g7ahV1CP90ulNiBMuBNmB6eMiXacRql9dKlTRT2U2dF:OxDSzOj0HhVwPNKM+jaXaR9wJRadF
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 469KB
- SHA256 2de6202594d99f797bd810db9d39efae3d9662861f4becc0d462884df0e8b793
- MD5 a78ba57b693d07b3f6e3e3243e5e781a
- SHA1 a397741da1a9e27c82cb5a4fc290cc31af3af4a9
- SHA512 3569bc002b86ddd445ade77df60d288fb1c7f73126bac078a451fda364bff9456ca18e411630517540d170050882c74c740f57a3a30e18797420ab319f1cd293
- SSDEEP 6144:eBxmR8AVNZiuOJvB0g7ahV1CP90ulNiBMuBNmB6eMiXacRql9dKlTRT2U2dF:OxDSzOj0HhVwPNKM+jaXaR9wJRadF
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.