General
- Target file.exe
- Size 348KB
- Sample230216-xpr5zabc27
- SHA256 9c02e9a54e16ca226fd6d902626e457a3bb2792b59f05160a3af1b2c799d997d
- MD5 ab800a3649645935f145b7aa2011c8d6
- SHA1 9b3a52b3c5962f0f8172001c22f8732b7600dfb8
- SHA512 ae8aa4b377adcce36579bade94aaffebe511cff8f55dcd6ca195f1fa9dae38ff9f0c768cc5ac6fc1436d72c65ad3c8c2e176430dd916c3a6a2ceff2373f3cbb2
- SSDEEP 6144:TOLhIiXp9idlMZ3f3Q/RzGr+JmWEwl0rM8/FfJEpgf9OL1bkmfyhHY:TOdIQcMZv3Q/R/JmqZ8S2Ygmm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 348KB
- SHA256 9c02e9a54e16ca226fd6d902626e457a3bb2792b59f05160a3af1b2c799d997d
- MD5 ab800a3649645935f145b7aa2011c8d6
- SHA1 9b3a52b3c5962f0f8172001c22f8732b7600dfb8
- SHA512 ae8aa4b377adcce36579bade94aaffebe511cff8f55dcd6ca195f1fa9dae38ff9f0c768cc5ac6fc1436d72c65ad3c8c2e176430dd916c3a6a2ceff2373f3cbb2
- SSDEEP 6144:TOLhIiXp9idlMZ3f3Q/RzGr+JmWEwl0rM8/FfJEpgf9OL1bkmfyhHY:TOdIQcMZv3Q/R/JmqZ8S2Ygmm
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.