Extracted

Extracted

• • Target

    d95295a9748537f398e5ead1a06a0d14859cdadcddaedc6037a0556fd736ce5d

  • Size

    892KB

  • MD5

    7b5affbb6ced6cdd8f3ce50a28c9aef5

  • SHA1

    b24af25cbf9b4d6265963603c8243c1aff98d6cc

  • SHA256

    d95295a9748537f398e5ead1a06a0d14859cdadcddaedc6037a0556fd736ce5d

  • SHA512

    ec23125066e902e5fc134d109f4dcdf0a8a424e53a26fb3acdec5e535d0cf4041154d24d90a89674a846120ad3265da4af8630164a512ab60e4d6cee9008709d

  • SSDEEP

    24576:0ylEc3tpbcXgx8XnwRouK7AMN0KBibHNzCZHdM5:DztKQx8XwzfKEDNu

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1