General
- Target file.exe
- Size 289KB
- Sample230215-bec3eahc64
- SHA256 fdcfaa16fe6d0dee08247a0148ee5c4e21a205be08f681daef921ed8d7a91620
- MD5 459d63462c99ea71709654f256f69832
- SHA1 3986f100766ceb933b8036b2c866f8b74a9633ce
- SHA512 622165bb209de994e9aa1460b7a9a05f4f6abdaf0cb111273c1a838f48fe3f2cb54007f734417fe91b4060dce742c908b74a2efc20c7603fbd2f780f8bd41222
- SSDEEP 6144:gLZJU7MSMQD6ZIkCSoLD5Ww7CmYf+2TtFN70Br:gFJtSjLS5+2JF6J
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 289KB
- SHA256 fdcfaa16fe6d0dee08247a0148ee5c4e21a205be08f681daef921ed8d7a91620
- MD5 459d63462c99ea71709654f256f69832
- SHA1 3986f100766ceb933b8036b2c866f8b74a9633ce
- SHA512 622165bb209de994e9aa1460b7a9a05f4f6abdaf0cb111273c1a838f48fe3f2cb54007f734417fe91b4060dce742c908b74a2efc20c7603fbd2f780f8bd41222
- SSDEEP 6144:gLZJU7MSMQD6ZIkCSoLD5Ww7CmYf+2TtFN70Br:gFJtSjLS5+2JF6J
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.