Extracted

Extracted

• • Target

    bce86d4fe90e7c316682300270c650b920cccf95a8a39504736e0937ab7da2a6

  • Size

    793KB

  • MD5

    53b709358d54bd8dd85bad37c0cb1245

  • SHA1

    58cd172d07a1dcf33c1944d57dc2b53ca095629c

  • SHA256

    bce86d4fe90e7c316682300270c650b920cccf95a8a39504736e0937ab7da2a6

  • SHA512

    9824b88a5d72144fcc7c0cb18dab9c888f0e5718d37d69f3f7bb27b9f72237f66ed628bf758b2c4488f900182c9b81aa3f537f6df471c6d83b8a23fcf9125be3

  • SSDEEP

    24576:oynGPRZdnKR3a7tn5pXOCDs+fzPX2TK6c:vnGndKQxXdDsGz+TK6

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1