General
- Target file.exe
- Size 276KB
- Sample230212-2fcq5sha87
- SHA256 1c2ba6e06c4580fcc1cf4cf52302ecb40e38834c858a495c259c6698938b3450
- MD5 21e688d6cd359552ae9ba7c51e9ffd63
- SHA1 1b7172c98cabaa0e33b2ddb91a5b1573428eef48
- SHA512 fa4f478fc6abfb883cc6e3d24d8614817ed6f12c6636f89987b465ab08174ad88e04a64815c1338b8090bf445f38eb49970a017777b37841aa507586937e2a0c
- SSDEEP 6144:9JoHq+YPnJChpYgT6QTI5IA4TbcGjr4j8B:97kpYgT6iQEU8
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 276KB
- SHA256 1c2ba6e06c4580fcc1cf4cf52302ecb40e38834c858a495c259c6698938b3450
- MD5 21e688d6cd359552ae9ba7c51e9ffd63
- SHA1 1b7172c98cabaa0e33b2ddb91a5b1573428eef48
- SHA512 fa4f478fc6abfb883cc6e3d24d8614817ed6f12c6636f89987b465ab08174ad88e04a64815c1338b8090bf445f38eb49970a017777b37841aa507586937e2a0c
- SSDEEP 6144:9JoHq+YPnJChpYgT6QTI5IA4TbcGjr4j8B:97kpYgT6iQEU8
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.