General
- Target file.exe
- Size 390KB
- Sample230205-za94caag39
- SHA256 542c14158eea3b59e3e077cf66870bfc11c9e7caa9cefe189c687c7906aeb11c
- MD5 5ccd3ae51eca1500506de4f5c68bcd5f
- SHA1 739c77920cc53eafd4f789927bbc08be89139b6f
- SHA512 682c90a511c4de2099b307f165f0410cc6328165308eed95f23bb67150459ce4244f098180d01bf4a401233b62cae92a086f1ed2a8045b7c08d8c72d45bddebc
- SSDEEP 6144:7blz8r2L/UTY4qApWT0FPxWPctYEWf/4StnCqR:7blz8ywTJV6qZWxZ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 390KB
- SHA256 542c14158eea3b59e3e077cf66870bfc11c9e7caa9cefe189c687c7906aeb11c
- MD5 5ccd3ae51eca1500506de4f5c68bcd5f
- SHA1 739c77920cc53eafd4f789927bbc08be89139b6f
- SHA512 682c90a511c4de2099b307f165f0410cc6328165308eed95f23bb67150459ce4244f098180d01bf4a401233b62cae92a086f1ed2a8045b7c08d8c72d45bddebc
- SSDEEP 6144:7blz8r2L/UTY4qApWT0FPxWPctYEWf/4StnCqR:7blz8ywTJV6qZWxZ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.