Extracted

Extracted

• • Target

    5427a5a2b54e283cc7aedb6bccaedcb9d5da6f6ed6d89f102528e01b27dd6df6

  • Size

    774KB

  • MD5

    497087d88b8b1c32496401f015d878fa

  • SHA1

    86f50057063f09cb0b1e2a4988666b383a95e58d

  • SHA256

    5427a5a2b54e283cc7aedb6bccaedcb9d5da6f6ed6d89f102528e01b27dd6df6

  • SHA512

    ccc9479c964cf72a813a6ff202bedf82fdcd7dfe782435c62fa9a77dbdd647b00b3147ee82cb6bcd0513a8d854ea05919486e4d096c48023674015375a6e18ce

  • SSDEEP

    12288:Yy90wwVR190lLemPNSvAHP/kOal4a7KvD8n7Nf6xvm5jCAhn:Yy+VF2LeoSoHJZDG7evU3hn

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1