General
- Target file.exe
- Size 302KB
- Sample230215-hbrvqaae78
- SHA256 369a6601ad77214adb36d79e27c0b4a59c25b605bbfe0ccc08ae93293d577e33
- MD5 e3170051f9dc69b77d55836724f6244d
- SHA1 f1ebde91d0e52ebba05895578a0782e7fc6ad83d
- SHA512 e3bc4dc6f9d0ace97fa5dd1ae1088088f440e4837988a68b4e901ac1260a829754844da0d68b1c724adaacb4629c03984494f588055e74579d5a725937cfff0b
- SSDEEP 6144:L4buQ6MhKbawXOTm2zzF2d+QbsklvzwtnwP0QuaS9f:L4BhKbaMOTm5xbHlstDND9f
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 302KB
- SHA256 369a6601ad77214adb36d79e27c0b4a59c25b605bbfe0ccc08ae93293d577e33
- MD5 e3170051f9dc69b77d55836724f6244d
- SHA1 f1ebde91d0e52ebba05895578a0782e7fc6ad83d
- SHA512 e3bc4dc6f9d0ace97fa5dd1ae1088088f440e4837988a68b4e901ac1260a829754844da0d68b1c724adaacb4629c03984494f588055e74579d5a725937cfff0b
- SSDEEP 6144:L4buQ6MhKbawXOTm2zzF2d+QbsklvzwtnwP0QuaS9f:L4BhKbaMOTm5xbHlstDND9f
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.