Extracted

• • Target

    new2.0.exe.exe

  • Size

    8.0MB

  • MD5

    d65be986166e494add52327ba4903a9a

  • SHA1

    e52c30ba421a34037f058e00df0b312a2ca80d09

  • SHA256

    53781320492e0f0c4cf79ef1051c2246d15f9345a244fcb0b5baf36233acb932

  • SHA512

    ee1625125c2ee21ea12641147b0149ac57f9f0dca049b372acd03351fed891f11e9231605d4d757dbb054489af88fdf1132288c2a22a0c0acfe31ba429898e85

  • SSDEEP

    24576:lPZY3DT9mHpSV27rQLaA9sEfPMemlGcOnckMsb+lxbl:s3UpSQsH2g7nckLmbl

  Score

  10^/10

  redlineld727discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Enumerates processes with tasklist

    discovery
  behavioral1behavioral2