General
- Target file.exe
- Size 274KB
- Sample230214-rwallsde2s
- SHA256 0e5bde66286ce0ae6c182e93aebde1f2bdaeb6c250bd0fc52dcf9952ce234d91
- MD5 6962ed9bcafa1728abb1bfd64ace7891
- SHA1 227e00d6f6476696c665167e6230bec7ec17c792
- SHA512 b36e260655facee050125c8b50e6333aa7f6f2492beb69636622886c87de991f54be78a17b83a6afeb4f83ad2be7472d6e67fb999dd7ae1570f60fa3101a2cb6
- SSDEEP 6144:5ibLMHnCgeJJe2SFGVSro9iMEWQuQIrDJ45LvAmJijRC8d3+Sk:5ibOnJeTGI9iMALA1Ld3
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 274KB
- SHA256 0e5bde66286ce0ae6c182e93aebde1f2bdaeb6c250bd0fc52dcf9952ce234d91
- MD5 6962ed9bcafa1728abb1bfd64ace7891
- SHA1 227e00d6f6476696c665167e6230bec7ec17c792
- SHA512 b36e260655facee050125c8b50e6333aa7f6f2492beb69636622886c87de991f54be78a17b83a6afeb4f83ad2be7472d6e67fb999dd7ae1570f60fa3101a2cb6
- SSDEEP 6144:5ibLMHnCgeJJe2SFGVSro9iMEWQuQIrDJ45LvAmJijRC8d3+Sk:5ibOnJeTGI9iMALA1Ld3
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.