General
- Target file.exe
- Size 310KB
- Sample230216-d2216afc2v
- SHA256 e4c36dbf9f0fcd8cd2c61cc05c1230f1ebfc991ae3476e080102403100763bb4
- MD5 5432af3b354ec4165d88443c06f8f5da
- SHA1 f7904ffa9153241738b6224ccf09a8f3299dcca8
- SHA512 ab923d5dcadefed18007c71ad6fc0190b70419fbdbf47e56c5d3b8ba79f57ce20ed3c78c95d746a4616d440261efeea97273807acc0b4a94d6d6ad64b74fa7fb
- SSDEEP 6144:Avu3PwbwD7JwzB11154dkfmdIeFkpPUmzGgExKtPGd:Am1D7JybH54dkfmoRi6tPG
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 310KB
- SHA256 e4c36dbf9f0fcd8cd2c61cc05c1230f1ebfc991ae3476e080102403100763bb4
- MD5 5432af3b354ec4165d88443c06f8f5da
- SHA1 f7904ffa9153241738b6224ccf09a8f3299dcca8
- SHA512 ab923d5dcadefed18007c71ad6fc0190b70419fbdbf47e56c5d3b8ba79f57ce20ed3c78c95d746a4616d440261efeea97273807acc0b4a94d6d6ad64b74fa7fb
- SSDEEP 6144:Avu3PwbwD7JwzB11154dkfmdIeFkpPUmzGgExKtPGd:Am1D7JybH54dkfmoRi6tPG
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.