Extracted

• • Target

    46cedac70b622d956b42016ffc41740a8e4adac188c94270c46961a7732b094e

  • Size

    582KB

  • MD5

    4bcc93e5c6fa49832138d828c0591609

  • SHA1

    c862f8e0d754a2b3c2369f01355d2c9db7566289

  • SHA256

    46cedac70b622d956b42016ffc41740a8e4adac188c94270c46961a7732b094e

  • SHA512

    f43a19959a486e16bce65a5cb8d755e10a7bbaf566cfe2d38bca78023e2c7d669d67424a69c8d2fad5ee6f712a5f4da61485fd4370f7eebfa195e8113bf1720e

  • SSDEEP

    12288:8LDfczWW/AgKv/wrpnGk6lfSPMn2nOwZDfPFb/Xj:8ffiKSMXlq0wtBDXj

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2