General
- Target file.exe
- Size 421KB
- Sample230202-1dletsga64
- SHA256 ba504fe81eba382ceb7bf5ab201a0c171cd12d3df8aba5a89d6fd2625e704a25
- MD5 a64192758f007855605a937e59c34f5c
- SHA1 9146136b8edfaf33a417be2d0d29b9fa4e9fd814
- SHA512 16519b533fd1cc4d8bf6664d44d026ef5dee70dd2df47a80d3c03bfe8d19ed2a05ad34449236dd629527add818c2946df1915e2285b7c79a1af6357bb8e71458
- SSDEEP 6144:Gxw91LVMiWE5aSd5YRJmKSwwRvONGHU8p7sH5Ac3lwKwpxfjV6ptCbNKN:Gxw915M9yaSQbFSwa2N+U8pYZAglej
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 ba504fe81eba382ceb7bf5ab201a0c171cd12d3df8aba5a89d6fd2625e704a25
- MD5 a64192758f007855605a937e59c34f5c
- SHA1 9146136b8edfaf33a417be2d0d29b9fa4e9fd814
- SHA512 16519b533fd1cc4d8bf6664d44d026ef5dee70dd2df47a80d3c03bfe8d19ed2a05ad34449236dd629527add818c2946df1915e2285b7c79a1af6357bb8e71458
- SSDEEP 6144:Gxw91LVMiWE5aSd5YRJmKSwwRvONGHU8p7sH5Ac3lwKwpxfjV6ptCbNKN:Gxw915M9yaSQbFSwa2N+U8pYZAglej
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.