Extracted

Extracted

• • Target

    910a3d319e91fdca3c9fbaacb818ab424e4b58c7c3e33ed8e626c5184ab99ccb

  • Size

    849KB

  • MD5

    dab948af7ae9df10213d204b8fd90d1f

  • SHA1

    27fc872b5f01f3d90c8420341389f68b8adf5fa6

  • SHA256

    910a3d319e91fdca3c9fbaacb818ab424e4b58c7c3e33ed8e626c5184ab99ccb

  • SHA512

    26d521e0bb95549004021959cc0231794d8ff568f98532f153fe5874266e57d411146799cb8b4f72ca5f6f4e6be8e6d0eda9b8ddf6e2142161b875dbe866bf82

  • SSDEEP

    12288:4y90gXBvZpM5dTSzjg0x4BkEeWWqL1qsgl7/kb4JdozWOZQUcNcDLB3Q9Ty:4y3XBhpMLTSTxWisssbioWToAly

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1