General
-
Target
286954cfb226c9f6a2e509b169d7bb2e.bin
-
Size
225KB
-
Sample
240708-cxdbkayalp
-
MD5
5ba44d21bd03f42a2d407b15d6cd41d2
-
SHA1
f394f2dd98cb5f1c4921517a22dea5ed0c48e18c
-
SHA256
bf5f81da33886e5eac772dd3fedad6a8e1f929a9489d8f3e95145747518f77ee
-
SHA512
0d801a15150695a7eb624510b7531fa6ed0e59648e70c42d1bb5acc8bf52553b357c6c27c3f86133c462428d9bfa2ae68863ee533cf4229e4317c648c30b255c
-
SSDEEP
3072:NBw7E9tZWABkkMU9+Bf0NXcpQ0htnMnWzvVNQTKUgSR9HDm9PPWeee5oc+bh8gmh:l9tZjBkqGfoIDcQNNQTRLpqyJtEFt
Behavioral task
behavioral1
Sample
6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729.exe
-
Size
433KB
-
MD5
286954cfb226c9f6a2e509b169d7bb2e
-
SHA1
afec3786d481b68a560cd58b47a0dd3728b02f8c
-
SHA256
6b1033fe52474e9938f41e536c69e190f586adf97508b70473860272b2dc1729
-
SHA512
1c91a45f2c69f7a024d3406eb761cc5d4ddebdba008e0d007a34b90d60fcfa6c193563b1bcca192828a4981eff9cf289dc76b6978654c4360f35b80184399736
-
SSDEEP
6144:NWtMKz49H6zgtfT7tpE3gq46DZ/mkmEq4RRbZGky847ecW:83z4gAnE3FPNUObkky17ec
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-