Extracted

Extracted

• • Target

    cac29d98c691e136e16be2f6b702eeb70d0d8b603c95a4b367b62b76fe69ba97

  • Size

    794KB

  • MD5

    3f7e72084b1ba82e3c3e42d5192b17d1

  • SHA1

    235ccde444b3dcb95531294d8fe14972e550ca06

  • SHA256

    cac29d98c691e136e16be2f6b702eeb70d0d8b603c95a4b367b62b76fe69ba97

  • SHA512

    94aa7d0aa270dc2f9a3eb27ae382a8d2170bc8ae3a8a1aa3c37deb8c552e7e7071c290cffd1c754687eb27536ab7cb7b49543c114699f24d6c1de490cd6f3710

  • SSDEEP

    12288:by90U2mfM5xemW8fDWvIYinnepBrR5Iw67PcnJnepWzn18usU90MrX36GA:byacM5SQdnOR/67EnYpWrCenXqGA

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1