General
- Target file.exe
- Size 349KB
- Sample230216-2z4c7sce56
- SHA256 522c9d42e4f959a76eeed9a2f9d70e60e7d4cd808b97bfa8df14f50e53c2319e
- MD5 5c0af35a996b2dcec9d7b0ec6fc719b0
- SHA1 a0666b13c3fb5b3b0487887544b2aa73a4e6216a
- SHA512 4ad47ab7d8c29364be7b8abf8952544567c92b71b0fa37f41de873c9662a044507404fa6c7116c995ceee4489addf1be57ea986f521cdc4d4d76e64370e44c4c
- SSDEEP 6144:gjL92DFvWp511otvikyw47pRTZbX3gE2eHTFE:gjp2ps64D7pVpR3+
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 349KB
- SHA256 522c9d42e4f959a76eeed9a2f9d70e60e7d4cd808b97bfa8df14f50e53c2319e
- MD5 5c0af35a996b2dcec9d7b0ec6fc719b0
- SHA1 a0666b13c3fb5b3b0487887544b2aa73a4e6216a
- SHA512 4ad47ab7d8c29364be7b8abf8952544567c92b71b0fa37f41de873c9662a044507404fa6c7116c995ceee4489addf1be57ea986f521cdc4d4d76e64370e44c4c
- SSDEEP 6144:gjL92DFvWp511otvikyw47pRTZbX3gE2eHTFE:gjp2ps64D7pVpR3+
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.