Extracted

Extracted

• • Target

    5029ff5a633fd4b53f325eb10eebaadc5981a15bc1a2e97b0087a5e8aa8d4175

  • Size

    890KB

  • MD5

    971eceda0b1d3971ab5faf08efb47a83

  • SHA1

    16503084b4a98a0f3c817a37d0f56a803983397a

  • SHA256

    5029ff5a633fd4b53f325eb10eebaadc5981a15bc1a2e97b0087a5e8aa8d4175

  • SHA512

    4457d17c519ebdc41e9bf7904c659eb8e87b5ea3341bc2afe4aa357d92b0836a287cc8e41cacf26507157ce50f1394ef0a06de6008accdc83694e5218a252436

  • SSDEEP

    24576:7yfA7Inn7RNPnsZ6WYB0BaMNOz7/BipA2w6J:uY7In7bnX8qUA2P

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1