General
- Target file.exe
- Size 331KB
- Sample230201-sdwa2aab92
- SHA256 6e3ef582ebca27f12ebff54f82e8049baf35d2586ce5b943615474b2bc951137
- MD5 ef176de01a21df20fc402095195076e8
- SHA1 f129a8138792a2a6d34961fbcd8863496adb1d6e
- SHA512 e341411fb22baff5ee62dbd05dfb9031bfc433d30b6de1889b2029fd612fffd892cbd799a4dfff8f98a55f033178d0441dede27eaa204b63d1a0f5e28fcbf0c2
- SSDEEP 6144:yqGMf5kLLy1ILlqCuDiV2KdA9MApDZs7oU5tUEGNEPN4:yqTG/y1IwCCgBeSApy7oq6VNE6
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 331KB
- SHA256 6e3ef582ebca27f12ebff54f82e8049baf35d2586ce5b943615474b2bc951137
- MD5 ef176de01a21df20fc402095195076e8
- SHA1 f129a8138792a2a6d34961fbcd8863496adb1d6e
- SHA512 e341411fb22baff5ee62dbd05dfb9031bfc433d30b6de1889b2029fd612fffd892cbd799a4dfff8f98a55f033178d0441dede27eaa204b63d1a0f5e28fcbf0c2
- SSDEEP 6144:yqGMf5kLLy1ILlqCuDiV2KdA9MApDZs7oU5tUEGNEPN4:yqTG/y1IwCCgBeSApy7oq6VNE6
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.