Extracted

Extracted

• • Target

    a30b09afd6644a1259fc26b3528d15b7a48b9694d4cea9d8efd2d49a58990cc8N.exe

  • Size

    590KB

  • MD5

    69203af918d6897dc142c860dd1bb9e0

  • SHA1

    77f37b8b6f12a044e0a94a313a8e54dc27216984

  • SHA256

    a30b09afd6644a1259fc26b3528d15b7a48b9694d4cea9d8efd2d49a58990cc8

  • SHA512

    37e5f1d5238b6db0e715d3615aabf272156f910155be6d2aff2fa46ae64a2db8da6f4ae9022c5eada9019db712f5ada0201ba8a3fefdbf4f3982c0fd434d5995

  • SSDEEP

    12288:Jy90kjIbABFX4LwN3hl+cnn6aTaR50wIiPIqzneWKpDqeu8iF:JywbcXtx8cniRPIiQqy3pHu8iF

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1