General
- Target file.exe
- Size 293KB
- Sample230212-at2tmsfd8s
- SHA256 7f40b6923ee5cb187eda60bd42fb247ec42f551cfba81a23ce61b75ff0e8be24
- MD5 931bfb8d925f53073ff60ba9d752bf1b
- SHA1 201f516bc52bd87c1df1bfffb9d269f435fb35ae
- SHA512 341b6833d3a5c11e3c6ee122288b63c464dfcac39403739be8c021142c91159d2230f72d9ed8785e255f60664d3056f6b9aada8b759db2248b071a8d9304adab
- SSDEEP 3072:vjqE4+0Jrmr5ClTba5ojvsiQ9caItyn28CTI6yS+vpsEfYhkyU8ROl2ZcPtRU1yr:vGLRh969c9yn28CTRyfwhfU84Qqtm1P
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 293KB
- SHA256 7f40b6923ee5cb187eda60bd42fb247ec42f551cfba81a23ce61b75ff0e8be24
- MD5 931bfb8d925f53073ff60ba9d752bf1b
- SHA1 201f516bc52bd87c1df1bfffb9d269f435fb35ae
- SHA512 341b6833d3a5c11e3c6ee122288b63c464dfcac39403739be8c021142c91159d2230f72d9ed8785e255f60664d3056f6b9aada8b759db2248b071a8d9304adab
- SSDEEP 3072:vjqE4+0Jrmr5ClTba5ojvsiQ9caItyn28CTI6yS+vpsEfYhkyU8ROl2ZcPtRU1yr:vGLRh969c9yn28CTRyfwhfU84Qqtm1P
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.