Extracted

• • Target

    58b066d67afcc474035333c90f2d790efac9d7b5990b03e2f5bd86ef1263fafcN

  • Size

    426KB

  • MD5

    971be1b8811be10af38360b3acf53340

  • SHA1

    a8a8bbf2e490a1a3c69b85477d47b99c624451c4

  • SHA256

    58b066d67afcc474035333c90f2d790efac9d7b5990b03e2f5bd86ef1263fafc

  • SHA512

    ed9d288761fe0686309c44ef44f1bd358227d23aba42f2b5fe97370e19b7265b69686a33b9bcdb2458568603c5d2f7d47084437742b7215f811c428050e79989

  • SSDEEP

    12288:NbvE6fKePak2ohwTeR8N51jWy7ZOdHn3te:Nc6fXws8N51jWy7ctn3

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2