General
- Target file.exe
- Size 396KB
- Sample230206-2fcfdabd9s
- SHA256 fae2b88ad0f4481f9de18459d8e7fc0385643b2a3ae84927a094ca9b793e6c7d
- MD5 8b17cc544fa0b999f8f4ea975ce2dc55
- SHA1 56e2b42214dd861953195dafc193371f676b8147
- SHA512 160e0d6926d51170292d5e467e4efe9632e590ed77e2263d68f5dfde2d1e76bcfb68b63ad427a5d013211d0f74778da6a0aed887b9b6d24bd2cd020963162865
- SSDEEP 6144:Ci9RLVpoN+bwZO0FzcLr4VP2rjret3LdCUObpuQj9qHOa:C0RReN6kOscv4J2QZCPFljGO
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 396KB
- SHA256 fae2b88ad0f4481f9de18459d8e7fc0385643b2a3ae84927a094ca9b793e6c7d
- MD5 8b17cc544fa0b999f8f4ea975ce2dc55
- SHA1 56e2b42214dd861953195dafc193371f676b8147
- SHA512 160e0d6926d51170292d5e467e4efe9632e590ed77e2263d68f5dfde2d1e76bcfb68b63ad427a5d013211d0f74778da6a0aed887b9b6d24bd2cd020963162865
- SSDEEP 6144:Ci9RLVpoN+bwZO0FzcLr4VP2rjret3LdCUObpuQj9qHOa:C0RReN6kOscv4J2QZCPFljGO
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.