Extracted

• • Target

    78f5b2d316ddd81ae6ac468cc2c2306908d79a9cdfe32d77d087b3708976e679.exe

  • Size

    530KB

  • MD5

    d3109b1aeb82f6ef06e87b0036996a34

  • SHA1

    78952ac6e4356b4d1b353303510063e7e3ef9844

  • SHA256

    78f5b2d316ddd81ae6ac468cc2c2306908d79a9cdfe32d77d087b3708976e679

  • SHA512

    8c002f591075d3d420d4022913f85bea4aa9050246cf2beeadc65645521534e52c00e131d9f0430885344b8706e0fda6858376bddaa84d3deed09abca8493d10

  • SSDEEP

    12288:/lcaxRaNnn6mbtR50wisMIw1nefXIf10/:GSenpRPisFwMQO/

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2