General
- Target file.exe
- Size 288KB
- Sample230214-1dl2csgd33
- SHA256 b2e419c17f1bb09f09d1a6b689c5bf16e44814e5f8bc0b1fb3a6760991ca219d
- MD5 967edd3287db413a9f3b8d5f748480c9
- SHA1 d7cdfde4c01c5fd2c847b70e7a8962b953541e66
- SHA512 ffd7e589a7a146add6f4f273b1195fcbd981d4c93e9c0f87ce8a837a26dad54971ebb3ac5424544af56eb3f11f25c2370a037118827e7826eef10dc4d4d94167
- SSDEEP 6144:kLSom6gTe9Nego3/Svz7zmiaMSDvrJOn2K27x:kWotgwg3/Cz28WrJO2K2
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 288KB
- SHA256 b2e419c17f1bb09f09d1a6b689c5bf16e44814e5f8bc0b1fb3a6760991ca219d
- MD5 967edd3287db413a9f3b8d5f748480c9
- SHA1 d7cdfde4c01c5fd2c847b70e7a8962b953541e66
- SHA512 ffd7e589a7a146add6f4f273b1195fcbd981d4c93e9c0f87ce8a837a26dad54971ebb3ac5424544af56eb3f11f25c2370a037118827e7826eef10dc4d4d94167
- SSDEEP 6144:kLSom6gTe9Nego3/Svz7zmiaMSDvrJOn2K27x:kWotgwg3/Cz28WrJO2K2
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.