General
- Target file.exe
- Size 301KB
- Sample230214-e7nw6aab41
- SHA256 2beccf8a915c34bf6b081c72220805b5871c26fb8e2038b8f6ca7b351cd90061
- MD5 aaf2dc125576a201421dd18ca7081a23
- SHA1 c782c53a632d9fbe02e117bddde91b39251e511c
- SHA512 31d765d30d6c23732f929cf6f14e76d8cb07e99737ff7593b5b64dfa26534fbf50290af7e020f4103770ec9ec24087597c5b976a802e0b289f581ceb6a298186
- SSDEEP 6144:suL9R0/VTps9DtlbZYr540hqTCpAdh3NIbs9DUn:suLATpsxHbZYr5vy9eA9+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 301KB
- SHA256 2beccf8a915c34bf6b081c72220805b5871c26fb8e2038b8f6ca7b351cd90061
- MD5 aaf2dc125576a201421dd18ca7081a23
- SHA1 c782c53a632d9fbe02e117bddde91b39251e511c
- SHA512 31d765d30d6c23732f929cf6f14e76d8cb07e99737ff7593b5b64dfa26534fbf50290af7e020f4103770ec9ec24087597c5b976a802e0b289f581ceb6a298186
- SSDEEP 6144:suL9R0/VTps9DtlbZYr540hqTCpAdh3NIbs9DUn:suLATpsxHbZYr5vy9eA9+
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.