Extracted

Extracted

• • Target

    9ec24cdf39f46a97413adc307bbfc3a1983a27ec755c861a9308ea2bdcd8bc87

  • Size

    793KB

  • MD5

    d5cccb10fa9e3c7f2d41dbabdb159416

  • SHA1

    4b95ba83a7ca3d13420596bed6d664508c7adcc3

  • SHA256

    9ec24cdf39f46a97413adc307bbfc3a1983a27ec755c861a9308ea2bdcd8bc87

  • SHA512

    5c9d83d533c8683cef452f3e69ea40b9774939aa49d60939f0328a790a30f5682412df46ed6ebb1d5b9479cff18c1782701d4443604fb7d18704e3e280447e3a

  • SSDEEP

    12288:Gy90f7ZOyBnmEFnn2pVGR5VwnoPXVAneNbDVCouHEIIeV7McTpusoFRKz:GyOb1JFntRYnovVf9v9IhV7LTIKz

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1