General
- Target file.exe
- Size 293KB
- Sample230212-emcndsdg8v
- SHA256 78fe0ee9f7f88a0ede608a6750d73e983fc345fd05cd16aa1f3c58674f53ec3d
- MD5 5e2cefcd287e9d7d99d7a421d11b6f6d
- SHA1 6cced19f1686eed9af475f31bb697a7bf1bede29
- SHA512 2ea823cb678c0fb6d89bd907ada6731b0a3af5fd7f4f90cd73fdabd6a88fd4a1294c5966b9f95ba73c0703598a154fc51d0ddafbca789a9efe8526d34e8bf132
- SSDEEP 6144:BGiR/tlELjyvu4OTbXHJpejvOmpzyuXJb:BGcMLkOPp0jvRzR
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 293KB
- SHA256 78fe0ee9f7f88a0ede608a6750d73e983fc345fd05cd16aa1f3c58674f53ec3d
- MD5 5e2cefcd287e9d7d99d7a421d11b6f6d
- SHA1 6cced19f1686eed9af475f31bb697a7bf1bede29
- SHA512 2ea823cb678c0fb6d89bd907ada6731b0a3af5fd7f4f90cd73fdabd6a88fd4a1294c5966b9f95ba73c0703598a154fc51d0ddafbca789a9efe8526d34e8bf132
- SSDEEP 6144:BGiR/tlELjyvu4OTbXHJpejvOmpzyuXJb:BGcMLkOPp0jvRzR
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.