General
- Target file.exe
- Size 277KB
- Sample230213-bec3eahb3s
- SHA256 99c89da9e496f81332c02c82f4a294dd4b23525aa37ea859b3b926d1f16c7762
- MD5 2acdb12641f94a1c65944502ef5c2db3
- SHA1 99d52ae3bbe9d0311c4f46fe8cd96d59437f9753
- SHA512 4897191bfcd49031958a52542e655363ebdfcf1d626c1a41dff341e40d7d75c2907b47116435edf72f36904eb9f28d86409a29719b2bf144a4e18c0ad532e6a8
- SSDEEP 3072:BUcZlyk5HVKYLoxQqO9Hnn05qHlXXoqKoXhe/H/Cb23VKN4XAsJzmg0Z5IbIqepq:vCS2O9uiXvPXU+23VZCknPSf50Bd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 277KB
- SHA256 99c89da9e496f81332c02c82f4a294dd4b23525aa37ea859b3b926d1f16c7762
- MD5 2acdb12641f94a1c65944502ef5c2db3
- SHA1 99d52ae3bbe9d0311c4f46fe8cd96d59437f9753
- SHA512 4897191bfcd49031958a52542e655363ebdfcf1d626c1a41dff341e40d7d75c2907b47116435edf72f36904eb9f28d86409a29719b2bf144a4e18c0ad532e6a8
- SSDEEP 3072:BUcZlyk5HVKYLoxQqO9Hnn05qHlXXoqKoXhe/H/Cb23VKN4XAsJzmg0Z5IbIqepq:vCS2O9uiXvPXU+23VZCknPSf50Bd
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.