General
- Target file.exe
- Size 395KB
- Sample230207-e5yzcahd46
- SHA256 5ec9de28fba96485bf91582b0629f85a95fe77a5628bb598ac4137cf4b2319f3
- MD5 f342435a8afd4f8f5e995b3ddda302d1
- SHA1 033d12cf789b945584677303564773657a5d776c
- SHA512 0ef320bac11a77aa87aaf5c7cc7e08d2f843a7180966cf30c21e8e7ebc0773b1bc9c9e90b61929b46a4ac9f92f3359a117348b90e872e79aeca789c2c2a520a0
- SSDEEP 6144:miSjLInS/WKYbxOg/eWzDYMwMjBix5yMVzu7gTpuQj9WgaL:7McpxOXaAM0x5yiRlj/
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 395KB
- SHA256 5ec9de28fba96485bf91582b0629f85a95fe77a5628bb598ac4137cf4b2319f3
- MD5 f342435a8afd4f8f5e995b3ddda302d1
- SHA1 033d12cf789b945584677303564773657a5d776c
- SHA512 0ef320bac11a77aa87aaf5c7cc7e08d2f843a7180966cf30c21e8e7ebc0773b1bc9c9e90b61929b46a4ac9f92f3359a117348b90e872e79aeca789c2c2a520a0
- SSDEEP 6144:miSjLInS/WKYbxOg/eWzDYMwMjBix5yMVzu7gTpuQj9WgaL:7McpxOXaAM0x5yiRlj/
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.