Extracted

• • Target

    a2668a61a74ad9d421b219c92e0a2e632bfa0f596822156a80e578aef6fa3f15N.exe

  • Size

    488KB

  • MD5

    dd3bbe903628501d2887a07f15f9efc8

  • SHA1

    88f6234f6aad4e3389312be693362901a0dd1e28

  • SHA256

    6cf1a9543ac427e9fd5bde9da5177ce58e0fc66d5563561be4a16157a9ac8cda

  • SHA512

    61a928846f6b66269dfd5efd79f05c84313ef4416e293d809a505bba35c93efd400a87f9447ba2e39ff4be7998f1a239d6a445fb79d96c329ccd436d7edf8018

  • SSDEEP

    12288:nyyrElOIzAeS87kpIO6xMcX1HPKSIsO7NS:yK0fZhbX1H7IsO7Y

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2