General
- Target file.exe
- Size 301KB
- Sample230214-ab2e6ahc77
- SHA256 bdd27f75f15db71de2b4668637f3ee515349a7b700422c9d9cdfe922bc382515
- MD5 757005852f29a97a4e547320555a5fb7
- SHA1 c8c5f1f81d07511b823d15717f0703d6e6860b29
- SHA512 d095eed3df3637690d2692bb0b8653830901fcee5ef407be2ca2033e9d2d816317f6ae2e0658f1a955be5cd3714ffa356b9d6d6667174e6f19d1ca4eb97e9235
- SSDEEP 6144:YTQdXhXwzQOoEHJD0TNzsbAdS9bWoYhdc+xTgi:YTQvgQOvAdS9J
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 301KB
- SHA256 bdd27f75f15db71de2b4668637f3ee515349a7b700422c9d9cdfe922bc382515
- MD5 757005852f29a97a4e547320555a5fb7
- SHA1 c8c5f1f81d07511b823d15717f0703d6e6860b29
- SHA512 d095eed3df3637690d2692bb0b8653830901fcee5ef407be2ca2033e9d2d816317f6ae2e0658f1a955be5cd3714ffa356b9d6d6667174e6f19d1ca4eb97e9235
- SSDEEP 6144:YTQdXhXwzQOoEHJD0TNzsbAdS9bWoYhdc+xTgi:YTQvgQOvAdS9J
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.