General
- Target file.exe
- Size 288KB
- Sample230213-vkn7eaef88
- SHA256 e101c41dd5aa67b70dc9852979346e29c42fcfe32d1f6ae1b6c2d69a2e634ac3
- MD5 adddcd7cd201c0dbaf9cf28e2f41c7d8
- SHA1 a6c818d29e8af128eacad9e2642b886a82e09fc6
- SHA512 7ed016321a7fffe61de8863ead24bec79f3a45b171a39bb9ea4a72888d85e81821d4f0da175c8b16279622e94f1305e9dc4e85d39a52960973ce80d4dca43f40
- SSDEEP 6144:ACU4j08L+ri1XXg+Tz8IfIufc7yYQpcJbR7QwtUvqP7:AC3L+rMgDIfIIc7yfebPGv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 288KB
- SHA256 e101c41dd5aa67b70dc9852979346e29c42fcfe32d1f6ae1b6c2d69a2e634ac3
- MD5 adddcd7cd201c0dbaf9cf28e2f41c7d8
- SHA1 a6c818d29e8af128eacad9e2642b886a82e09fc6
- SHA512 7ed016321a7fffe61de8863ead24bec79f3a45b171a39bb9ea4a72888d85e81821d4f0da175c8b16279622e94f1305e9dc4e85d39a52960973ce80d4dca43f40
- SSDEEP 6144:ACU4j08L+ri1XXg+Tz8IfIufc7yYQpcJbR7QwtUvqP7:AC3L+rMgDIfIIc7yfebPGv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.