General
- Target file.exe
- Size 299KB
- Sample230203-rcplesbb5s
- SHA256 134ab8a05fd71a6762287cef0ee99a8ca08c076ffcc23ad44c32fe4f537f6c7d
- MD5 ac8b7d8ee7fabfd7f31551facb4e214d
- SHA1 0cb5f79a14b1c1c991bc0f34503b1a0e2873a6f0
- SHA512 75bafe9c9df873c75114aa39d4e61663885d3faa65c9400cd093f48a1342424d0851e18b036484eb82bba72bbf163779395b3e4e4310c7c27110d8ee16683b72
- SSDEEP 6144:/e92NLAvpoxuImqNRDAtSQuG8gJEVq6rZSOKU+XiTrLQq:/e92NwoQqNREtHQgWBZSOKUMiTv
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 299KB
- SHA256 134ab8a05fd71a6762287cef0ee99a8ca08c076ffcc23ad44c32fe4f537f6c7d
- MD5 ac8b7d8ee7fabfd7f31551facb4e214d
- SHA1 0cb5f79a14b1c1c991bc0f34503b1a0e2873a6f0
- SHA512 75bafe9c9df873c75114aa39d4e61663885d3faa65c9400cd093f48a1342424d0851e18b036484eb82bba72bbf163779395b3e4e4310c7c27110d8ee16683b72
- SSDEEP 6144:/e92NLAvpoxuImqNRDAtSQuG8gJEVq6rZSOKU+XiTrLQq:/e92NwoQqNREtHQgWBZSOKUMiTv
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.