General
- Target file.exe
- Size 388KB
- Sample230204-kz1tmsgc5s
- SHA256 085ff00dc3171b24aa36b377bbdf4d3c6ca8a159b69e680180605a02c104affe
- MD5 d59ec9541a7f99658d524628d4c19afa
- SHA1 73aeaf167ef3077648e8bab049a374f4c9917422
- SHA512 2cfb1bdc75557c23894811bb7c059cd7251cc19762d53142dede9e4e12ba701fd460559ad26e6adf1c221d4fe3f683e8cdce788bc33d51fbd2205fbd1c56bd50
- SSDEEP 6144:2m79ZLpUdhFzOECfuik0ZO1didr13753bqQ6hX:2mDidhYJGioUdr13dcX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 388KB
- SHA256 085ff00dc3171b24aa36b377bbdf4d3c6ca8a159b69e680180605a02c104affe
- MD5 d59ec9541a7f99658d524628d4c19afa
- SHA1 73aeaf167ef3077648e8bab049a374f4c9917422
- SHA512 2cfb1bdc75557c23894811bb7c059cd7251cc19762d53142dede9e4e12ba701fd460559ad26e6adf1c221d4fe3f683e8cdce788bc33d51fbd2205fbd1c56bd50
- SSDEEP 6144:2m79ZLpUdhFzOECfuik0ZO1didr13753bqQ6hX:2mDidhYJGioUdr13dcX
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.