Extracted

• • Target

    6ba239ded124b5ea070ecea3aea98db7c8e4ee2260c3f23feaf1fb9dee541a1fN

  • Size

    435KB

  • MD5

    641409e8e5cba9035c7a6f6afeec3770

  • SHA1

    898a8b533a37eaa46a3359349011ab0c8f9e3734

  • SHA256

    6ba239ded124b5ea070ecea3aea98db7c8e4ee2260c3f23feaf1fb9dee541a1f

  • SHA512

    5559aa7b9bcf5e7587d8336d2f55ea2fe038704800f50c3bc423d5ec8c6ba01886ca109f2f59838f19e8af95e04fa3a80e162fe63faa08c1c22926f2774d7f15

  • SSDEEP

    12288:ZzcQNw0UZSjBf6KytxYz72p0SzctJM0C:XK0UZSjBwaf2p0E2Mf

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2