Extracted

Extracted

• • Target

    e35932e6623e87cd21898111e872561ede10da0c1db522d1dfbf932e00c79284

  • Size

    850KB

  • MD5

    1f29f2bbc3c8f6aa675faf4584eb76cc

  • SHA1

    d60df36f4af744581a4a733ff551566a360ba674

  • SHA256

    e35932e6623e87cd21898111e872561ede10da0c1db522d1dfbf932e00c79284

  • SHA512

    36b20c6c77df91e4d1f78ce69fcb1f38696afa57b816c24e58f63ec180d731e4ed65309b6f52771339dede635f4297b98420e67f282f5e5a90109393a7a3424d

  • SSDEEP

    24576:kyRzdzlLouWPQOgMBxrIPLGEhmL+y7ERNFtsY:ztdzJokOxrITGBL1u

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1