Extracted

Extracted

• • Target

    7792120b3878841feaacb9d8db3a00d9a571ae921a40c1112458ee0eefa2b67b

  • Size

    889KB

  • MD5

    16ae8e1bf1ab9aaf12f3b0097d2920d8

  • SHA1

    73b62644d7b77c2e70009e12f602eab6429185b3

  • SHA256

    7792120b3878841feaacb9d8db3a00d9a571ae921a40c1112458ee0eefa2b67b

  • SHA512

    f9c11fe0550da67d0d3ed07edf40ccea72297341d0ca292a6b5dff5476119d93c0b8e7ebfc2d070fb91f7529f74716983be37a0eb5dce41b53dd229c16bfc23b

  • SSDEEP

    12288:3y90ecHppHFglVpv9cyct8T7U5YpIpYBQ8QBgMv1E5XqkLfRCuGOw7U1Icn4Hxq+:3yxgppHFghKFyg2Nzkcno0ZHQj

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1