General
-
Target
cdb91d68891826775281fc396a3e86e5.exe
-
Size
302KB
-
Sample
230312-xjmnasha3z
-
MD5
cdb91d68891826775281fc396a3e86e5
-
SHA1
039f5641e517aacda00cf463583e4baae47ff809
-
SHA256
99e9b7b6e9a87362faf21f9b50a34ea195c7c00961d9f12984c9822062f3df65
-
SHA512
5c810d309f6d763dbe30b950a872d802dd05a8ecdbc46cfe3ce3c0dbb255d3d1bf78ee24d5fa02328b8666bae66c4846e20c74cbe985987e53032b94f8726d1c
-
SSDEEP
6144:Z2FeXtsgbTtG2513jqf1VrMQoNeOkR3YsSwRspztV:ZQotsgbBfj0jceOkR3xRsfV
Static task
static1
Behavioral task
behavioral1
Sample
cdb91d68891826775281fc396a3e86e5.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cdb91d68891826775281fc396a3e86e5.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
cdb91d68891826775281fc396a3e86e5.exe
-
Size
302KB
-
MD5
cdb91d68891826775281fc396a3e86e5
-
SHA1
039f5641e517aacda00cf463583e4baae47ff809
-
SHA256
99e9b7b6e9a87362faf21f9b50a34ea195c7c00961d9f12984c9822062f3df65
-
SHA512
5c810d309f6d763dbe30b950a872d802dd05a8ecdbc46cfe3ce3c0dbb255d3d1bf78ee24d5fa02328b8666bae66c4846e20c74cbe985987e53032b94f8726d1c
-
SSDEEP
6144:Z2FeXtsgbTtG2513jqf1VrMQoNeOkR3YsSwRspztV:ZQotsgbBfj0jceOkR3xRsfV
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-