Extracted

Extracted

• • Target

    66b3c1abc4a114c1ce8d8e5b38089402ef590d8c02c15286e99e0e1a71cde2b3

  • Size

    850KB

  • MD5

    f0539215df2f62300ffaccbc58b48d5b

  • SHA1

    d302501ab811405cdefd46d1534149687ee6ceed

  • SHA256

    66b3c1abc4a114c1ce8d8e5b38089402ef590d8c02c15286e99e0e1a71cde2b3

  • SHA512

    5d431386be6afc4985b8fc056f2e40d00438e401ec1a91fdc09f049e4c8ecee98ab127c9bb687bb802d94944ac924e7fd0e0450af53bece68257735e117d5103

  • SSDEEP

    24576:dyM8fpvv4bpySo8oxFBSF3EHdiCwY70ngo:43fpvQb6BxehE9iC

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1