General
- Target file.exe
- Size 294KB
- Sample230215-t2jsksce7v
- SHA256 6b9ba8142fbc33fe4836047a4a92a5d2c75c407044737ae2dcc2b16a55ae7016
- MD5 972fae3744c3c012f5e8a6210f9bbaa0
- SHA1 18330232a69b2e38f7a80b149dd1cc2af94876f3
- SHA512 1559deb6e21c67b4552720d56365b0319505c0ec86fa1fefbbd4084b8a8658336fd55660723221556466e61a83b314c82d72de49d5080a64c4a49fffca3260a1
- SSDEEP 6144:08C6z1A1U/BQgSDIy78EHaV3uhXSLyaBuj4owUAMb0T:08n1Am/OgSUy7TH6uhXSLyafoBAh
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 294KB
- SHA256 6b9ba8142fbc33fe4836047a4a92a5d2c75c407044737ae2dcc2b16a55ae7016
- MD5 972fae3744c3c012f5e8a6210f9bbaa0
- SHA1 18330232a69b2e38f7a80b149dd1cc2af94876f3
- SHA512 1559deb6e21c67b4552720d56365b0319505c0ec86fa1fefbbd4084b8a8658336fd55660723221556466e61a83b314c82d72de49d5080a64c4a49fffca3260a1
- SSDEEP 6144:08C6z1A1U/BQgSDIy78EHaV3uhXSLyaBuj4owUAMb0T:08n1Am/OgSUy7TH6uhXSLyafoBAh
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.