Extracted

Extracted

• • Target

    08c1f49f80e1bde09ffbb9d2f9cb31ad975d77989cdf64ce68c0e5439885fbb4

  • Size

    793KB

  • MD5

    899a96376eac29c524a9a8021781d693

  • SHA1

    98d038003f7307a07b8cfdc3af675e7980c3481b

  • SHA256

    08c1f49f80e1bde09ffbb9d2f9cb31ad975d77989cdf64ce68c0e5439885fbb4

  • SHA512

    fa4b94552b3ada4d758a5fe3764cfc4a49b52c56e7e49597aee2a86fbd8a07050e496949ffe95fe25e137738869f2bc3313d615054d65f287210ed622d10c743

  • SSDEEP

    12288:4y90Zq8scllRo+nnhqvhR53wQ1PiGxnezKQeKm7qX8Aqb8aZTz8:4ycZDnQRuQ1qGwzbeKm8qb8sTY

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1