Extracted

Extracted

• • Target

    e7ab4d1228b88475a24cbe00294183b08ce42d7b7e5782abe2a81dd75adea67a

  • Size

    794KB

  • MD5

    70a9cf1c3c14b0e1fde399ba1845aa9c

  • SHA1

    ae8449c8bcd14d9d63ebfa3d85380ecae2146d0b

  • SHA256

    e7ab4d1228b88475a24cbe00294183b08ce42d7b7e5782abe2a81dd75adea67a

  • SHA512

    f6907fe3ed8559b5099fb2699b05a36f17d3348ac3da5873aef574928c7d7338bf6245fc13eb8137a3ad9e757a8a98006b56c8507b1c4c048c26a64a74c76e98

  • SSDEEP

    24576:TygEgBwoFXrQ3vSFQW4n/7tikC0I3D/TKR:mgBBBsY4n/JikfI3LT

  Score

  10^/10

  redlinedankogenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1