Extracted

Extracted

• • Target

    fdfab83925fe5500b2ae7cb66c6cd06313729d16995dd84f222165082d33e3f5

  • Size

    851KB

  • MD5

    aeae084282cecb5746fe0756e8541cdb

  • SHA1

    6c9650b27e1358d5dfd62fe6c8a2dd7ee6a7049d

  • SHA256

    fdfab83925fe5500b2ae7cb66c6cd06313729d16995dd84f222165082d33e3f5

  • SHA512

    6274829da6317041ea4fffd3c4f512e6031f9826c579a94e6a177947e45d24fe8f96a3d0b7eb1b68abab4ee250f4c42ac71a41b5182a5fac1863b7a2859497c6

  • SSDEEP

    24576:0y7xuxvveYbxxHsdAbnoYlUhHH4L//ah:DqvF1xCMlKHYL//a

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1