Extracted

Extracted

• • Target

    ea374e26870176c8fbcabfe7cdaaf9558a32095d920fa7b17d7ea4c275d05399

  • Size

    866KB

  • MD5

    de173e92891b01e21e763314950e73da

  • SHA1

    16810f504e4c926155e7e5bb4a8cc980b727cd14

  • SHA256

    ea374e26870176c8fbcabfe7cdaaf9558a32095d920fa7b17d7ea4c275d05399

  • SHA512

    36ddf98e54ec1d332d7704e0dc346ba8b2759dfa9be3f5d5e56d822350987ca3d34dd70d337f8b82c62ef814d1a236264f9213eb2d27624754d853f2598a6f85

  • SSDEEP

    24576:/ylW0m0cffu7hG55zcyyMxwDrCMdWNfFI:KE/HtLIDMxw/iF

  Score

  10^/10

  redlinedarkgenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1