General
- Target file.exe
- Size 394KB
- Sample230129-by4dpshd53
- SHA256 c4619e9a9054579e3dec675feb6773fb2ef08c74a008ef945fac19feb57c134b
- MD5 7906d037a32e3ec1447b0c7fb71c948c
- SHA1 4d1937b05158788b551625750af00f77d234ec2b
- SHA512 e2e66647c1329613c85e83e1b4c0d2c7b24a20ffd166ec98fa0a7de750e57723d4437791b4b5eb5e9c24beb2abbd983aa7fb5b733fa98c1a84818970fbb14bfe
- SSDEEP 6144:Y0LP3CRVZSK+kxEhmr0/pg+5kiGJkHM3893m0E954JFZ:Y0zpKmq4pF/ikn93mRz4JFZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 394KB
- SHA256 c4619e9a9054579e3dec675feb6773fb2ef08c74a008ef945fac19feb57c134b
- MD5 7906d037a32e3ec1447b0c7fb71c948c
- SHA1 4d1937b05158788b551625750af00f77d234ec2b
- SHA512 e2e66647c1329613c85e83e1b4c0d2c7b24a20ffd166ec98fa0a7de750e57723d4437791b4b5eb5e9c24beb2abbd983aa7fb5b733fa98c1a84818970fbb14bfe
- SSDEEP 6144:Y0LP3CRVZSK+kxEhmr0/pg+5kiGJkHM3893m0E954JFZ:Y0zpKmq4pF/ikn93mRz4JFZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.