Extracted

Extracted

• • Target

    7a3879abd45b5a301c6b7b213dbc4a0bd30ff1691fa902fff8dd029330112671

  • Size

    774KB

  • MD5

    aee34637d42227655020dfc235fc8362

  • SHA1

    83dbeedda4023dde9122e0f5514091af545b3a7d

  • SHA256

    7a3879abd45b5a301c6b7b213dbc4a0bd30ff1691fa902fff8dd029330112671

  • SHA512

    686555355e871e50b4143dd436655833290b896a13dfb3cca23add1c1e025f52c5ce2388db9c91df3d499c336bb538948e56956f26ad67014981845f6d41fb2a

  • SSDEEP

    12288:hy90cMwmni+j0QdxmPMSvATz/iIat4Y7KvgCuOzwB2b2UT9/WP7:hy0fn1RdxBSoT5NOSJT9uP7

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1