General
- Target file.exe
- Size 421KB
- Sample230206-qsdnesea86
- SHA256 a7a1bf9eee812ec821264ed36d26dcca0b50442d08285f7a568d62b607fcdfaa
- MD5 37c81c981d2b8dbc7a57bebc2606891d
- SHA1 dd0fc09897c07be5230a530b67f79f62327f712e
- SHA512 8464116cbb683b875af2e2d944bc129930585ca7556b0c845842790859ac95963e6dcea4a0ecc6231cd232140b4b34b070bde32a910108636098f1cb7fab3baf
- SSDEEP 6144:CVLZrI0cjwbf8cLB7UI9evclwYALtABine7i9l2TkQB+GhDtWPzuk6or:CVdrIlwhTeUgJAL7iChOzrD
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 421KB
- SHA256 a7a1bf9eee812ec821264ed36d26dcca0b50442d08285f7a568d62b607fcdfaa
- MD5 37c81c981d2b8dbc7a57bebc2606891d
- SHA1 dd0fc09897c07be5230a530b67f79f62327f712e
- SHA512 8464116cbb683b875af2e2d944bc129930585ca7556b0c845842790859ac95963e6dcea4a0ecc6231cd232140b4b34b070bde32a910108636098f1cb7fab3baf
- SSDEEP 6144:CVLZrI0cjwbf8cLB7UI9evclwYALtABine7i9l2TkQB+GhDtWPzuk6or:CVdrIlwhTeUgJAL7iChOzrD
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.