Extracted

• • Target

    b531256ff3540130473ec19746641ea435c58be153f4e0233f4f8281451aae99

  • Size

    575KB

  • MD5

    3fb91d76f1c92a79568eb8b1fac3551d

  • SHA1

    23d3af79030b2a5d97568045061004915b72e85d

  • SHA256

    b531256ff3540130473ec19746641ea435c58be153f4e0233f4f8281451aae99

  • SHA512

    adc3a7f43e0afbb173b09fb00148d8bd69d1306bf82363e1342cf997c4e98c51fc91b29bced11d6f8047729a6b6369a3c73ee2819f1ebc86af421d7cf8b47c37

  • SSDEEP

    12288:F91WnKygIjVozbSH0IUADHHZgIT4G0cIKds3N:/1RIjFH0IUKHH2IxIKE

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2