Extracted

• • Target

    ff796cfa476a4dc68d5d01340d99ce2aa76add70ea69f751ca0fa48f4b03724f.exe

  • Size

    387KB

  • MD5

    7c633602c37572f5c0134c56ffb03d4d

  • SHA1

    d0f59a62757b426eca5be2838f165e7f3ca63b23

  • SHA256

    ff796cfa476a4dc68d5d01340d99ce2aa76add70ea69f751ca0fa48f4b03724f

  • SHA512

    2c8e8ebb33575c96a9130865cdf7f5abbf73cc379de7e6d140aaa9fbe7b8c8c91eb5bde3b51a6b92563aa291e151800f022761061fb3fb9b5e33e2dd0238ba51

  • SSDEEP

    6144:HarYp69LhPz7fWS1bKtWM9bKlBNRjhZJh1qWeR4kAe8KxqK5g21TUxrOXWsiT4Vl:6fPzjoTOjntZJh1qWeR4kaNWTDNMc7

  Score

  10^/10

  redlinelyla10.11discoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2