General
- Target file.exe
- Size 293KB
- Sample230212-cgppnabc86
- SHA256 f0a6c814624edcedfa89ce88ad62383ea4a00f389ee9e789a0fb241eb1f65067
- MD5 8b6487416b0612c73143ff6949d1d094
- SHA1 e6c0a5b9060ec953ac5e819cbefe9ed76b309d24
- SHA512 9567d030bdd1e7eb4c7880d3e30610dc1e806320bbd082a6766149285d941fb4cecdb3a8111952dfb95892f2cdef78a0022654dd400f76cb93249b1e26b7a0d9
- SSDEEP 6144:uGERGQvsv/JdwTohyzdWxL8rnV0MiBgbmY3Om03O6SvwEVH:uG62fwTPWxqV7M69NRV
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 293KB
- SHA256 f0a6c814624edcedfa89ce88ad62383ea4a00f389ee9e789a0fb241eb1f65067
- MD5 8b6487416b0612c73143ff6949d1d094
- SHA1 e6c0a5b9060ec953ac5e819cbefe9ed76b309d24
- SHA512 9567d030bdd1e7eb4c7880d3e30610dc1e806320bbd082a6766149285d941fb4cecdb3a8111952dfb95892f2cdef78a0022654dd400f76cb93249b1e26b7a0d9
- SSDEEP 6144:uGERGQvsv/JdwTohyzdWxL8rnV0MiBgbmY3Om03O6SvwEVH:uG62fwTPWxqV7M69NRV
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.