Extracted

Extracted

• • Target

    99461ebe46719ac8e1c923a8f28e2af120219ed233907ad27e52be48c90c2caa

  • Size

    774KB

  • MD5

    7ec9e6399a569132b46282467cd99a2b

  • SHA1

    3713dec619ae8935a7d1b3d23d6292093997b2bf

  • SHA256

    99461ebe46719ac8e1c923a8f28e2af120219ed233907ad27e52be48c90c2caa

  • SHA512

    621b571ef52057cc80702e2d76e5e2f43c58bfa2d20f2785f60b16569e265e14f7fad04983359dbdb9eb7d4df08853a03fe891f82688b2814410a1a2ee807ebf

  • SSDEEP

    12288:Ty90/vqnHCxxWAEOqy7fy7JWmP4SvAAG/12ao4I7Kvh0+7NYhvh+BX488:TyGvVr2y7a7JWpSoAN0hD7gSX4V

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1