General
- Target file.exe
- Size 274KB
- Sample230214-sdwa2adf6v
- SHA256 c44fdab96164bfa9e4a50fd9018d28a783557d9cc778ff9e953b60efe1e1e2ec
- MD5 cfc5b91e4364ab4f6d7d68f739e9c17d
- SHA1 0df1053c45fd5befada3d0e50f9c865c15acf043
- SHA512 ccd8340c0d4ee433b427051608e8ead14132566d881bf9a2d0129bee21a0ff6fcf5b829d74f874dad30e588f807e74ddbc2a9db5cc4c399f42e2f635639837e6
- SSDEEP 6144:Jp1L+63CPr3N2u8m+pXjblxI5finCNrWFMlOcnTwTYjJsd:Jp1t3Kr3z+B/XsfiArIMlFnljJ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 274KB
- SHA256 c44fdab96164bfa9e4a50fd9018d28a783557d9cc778ff9e953b60efe1e1e2ec
- MD5 cfc5b91e4364ab4f6d7d68f739e9c17d
- SHA1 0df1053c45fd5befada3d0e50f9c865c15acf043
- SHA512 ccd8340c0d4ee433b427051608e8ead14132566d881bf9a2d0129bee21a0ff6fcf5b829d74f874dad30e588f807e74ddbc2a9db5cc4c399f42e2f635639837e6
- SSDEEP 6144:Jp1L+63CPr3N2u8m+pXjblxI5finCNrWFMlOcnTwTYjJsd:Jp1t3Kr3z+B/XsfiArIMlFnljJ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.