General
- Target file.exe
- Size 283KB
- Sample230212-np187sda9z
- SHA256 ebc4c541aab0b1aea85b33a1972534c3ff3f14dbd5822dc3ea99e7b688f4edc7
- MD5 369106594773c80b1809e90cc62f0288
- SHA1 656e03fd2c609e2d753b8275c1d451dd0536be06
- SHA512 47a3123958cee23e2404a6d605497aec45c111621b79aba35a86498d23e903461226b3c43bf0da87de168b9c607e6307fc6b1695cdf477c5e423a1261c2d750e
- SSDEEP 6144:2oFJjLov0xeWgfMIII58MeID0r6oTiguFKMu:2CLHeWZI5jDK6silFKM
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 283KB
- SHA256 ebc4c541aab0b1aea85b33a1972534c3ff3f14dbd5822dc3ea99e7b688f4edc7
- MD5 369106594773c80b1809e90cc62f0288
- SHA1 656e03fd2c609e2d753b8275c1d451dd0536be06
- SHA512 47a3123958cee23e2404a6d605497aec45c111621b79aba35a86498d23e903461226b3c43bf0da87de168b9c607e6307fc6b1695cdf477c5e423a1261c2d750e
- SSDEEP 6144:2oFJjLov0xeWgfMIII58MeID0r6oTiguFKMu:2CLHeWZI5jDK6silFKM
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.