General
- Target file.exe
- Size 293KB
- Sample230212-grfxqagg6t
- SHA256 ee8f0e850243a2aef508e5a14f8495d3aca0e9d88c0a059eb085357c543f55d2
- MD5 c8388338f5bee030e017a7860f8cc2c4
- SHA1 6effcd6c6b4e2fd78ce5b7d0b2b1b4ec7f6d71d2
- SHA512 361ae44f51176d4dbfb3080d430c9a70a46c3e47b817f6c934d7d3953eca686e3a97426b3bf8f955d33d895d8efaa59d7a47a5790e7f0ef7bedd5b63bfed93c0
- SSDEEP 3072:dje77+d5V5CuOtU3efzJ7Ox1hjBM95X8MDev7gXHQks0Z0Ih9jCK9f3qj1xRK28v:difCquOUWJ01rweeY7kQksK9/9ClX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 293KB
- SHA256 ee8f0e850243a2aef508e5a14f8495d3aca0e9d88c0a059eb085357c543f55d2
- MD5 c8388338f5bee030e017a7860f8cc2c4
- SHA1 6effcd6c6b4e2fd78ce5b7d0b2b1b4ec7f6d71d2
- SHA512 361ae44f51176d4dbfb3080d430c9a70a46c3e47b817f6c934d7d3953eca686e3a97426b3bf8f955d33d895d8efaa59d7a47a5790e7f0ef7bedd5b63bfed93c0
- SSDEEP 3072:dje77+d5V5CuOtU3efzJ7Ox1hjBM95X8MDev7gXHQks0Z0Ih9jCK9f3qj1xRK28v:difCquOUWJ01rweeY7kQksK9/9ClX
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.