Extracted

• • Target

    1ff95b17195b0cc7ddb6d5003b90d90830625f9f937f20fe62c86a360f4c1cdb.exe

  • Size

    580KB

  • MD5

    69b82c4ee965ad57d26f07fd15fdf080

  • SHA1

    2e081ca841d61cde75bcc72f1b66a7c0ecfe7357

  • SHA256

    1ff95b17195b0cc7ddb6d5003b90d90830625f9f937f20fe62c86a360f4c1cdb

  • SHA512

    8ddd0e2aec2657bd580353c3c03556c6061b8dc321a64c8e67712740d15c586da607bd06f2f9350eda55f9027e0649f061ee25fbfda84a4c97bc5766f69d82ed

  • SSDEEP

    6144:X90DDHmXldYAAIuLu6Zgv2Vu0w+Em3MaEB2kqXzVMSri8/k8Myt5i+u5IONqOj:X9iDGXlw/uSGQLoUri4t54yONNj

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2