General
- Target file.exe
- Size 274KB
- Sample230131-bc8fjadf48
- SHA256 5aa4304d76ce25d428450ce7232797f89e4fcc1c7d571bef470ad1c485a63a45
- MD5 9ad55bf3d993fbeaa8527d8f8cee2e95
- SHA1 5f27fd5129b8dfe6852427ce861c4a541ff0a47c
- SHA512 ec7c2270407552e5da52f92b04b252429efb08462313ee1f393d7fe620083eb7c4b6ade6509df6abf1f0ca56feb7ec1a0cbc4df948909f052bbde401405295d1
- SSDEEP 3072:ej7ZzuNBLOzQ485e4OmKhEJM5Gpw3pQU9VYPXlqpQFmK3faFL8wD77+y1UAnQSdH:+SvL+Q4OEq0GpUQLNqpeXaF5/smaDgd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 274KB
- SHA256 5aa4304d76ce25d428450ce7232797f89e4fcc1c7d571bef470ad1c485a63a45
- MD5 9ad55bf3d993fbeaa8527d8f8cee2e95
- SHA1 5f27fd5129b8dfe6852427ce861c4a541ff0a47c
- SHA512 ec7c2270407552e5da52f92b04b252429efb08462313ee1f393d7fe620083eb7c4b6ade6509df6abf1f0ca56feb7ec1a0cbc4df948909f052bbde401405295d1
- SSDEEP 3072:ej7ZzuNBLOzQ485e4OmKhEJM5Gpw3pQU9VYPXlqpQFmK3faFL8wD77+y1UAnQSdH:+SvL+Q4OEq0GpUQLNqpeXaF5/smaDgd
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.