Extracted

• • Target

    55ec2384eb48f0de5a8235135d8acfbc0250be1085ba988c1176827b4fe87a3f

  • Size

    588KB

  • MD5

    2150c48f59a6f1af9118948d5314db40

  • SHA1

    6f53939e1425ebafe957ce00a285643f5a6e5304

  • SHA256

    55ec2384eb48f0de5a8235135d8acfbc0250be1085ba988c1176827b4fe87a3f

  • SHA512

    cec1727435fa3cb1fa043c831e2f95247d800504e5cfe256615d9429a536aa2b91cb4547c77379a6c5395e1e814b68cdd0c9eb584409a89215879681a7fa9388

  • SSDEEP

    12288:lgGbg9FOa/bVSttdCl5pBaVCb1pKC9NysJ4JnMjtb:ltbgrVS6zD199NR

  Score

  10^/10

  redlineladadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2