Extracted

Extracted

• • Target

    f339fd215d5fa3fa61e17a45676bbb667806d35e09b1a31013539d4e9536cfff.exe

  • Size

    866KB

  • MD5

    f79f2a67d1c52c4fc4ce425e6766d396

  • SHA1

    3350c47677bd9f85d528aaf554299b30d290c339

  • SHA256

    f339fd215d5fa3fa61e17a45676bbb667806d35e09b1a31013539d4e9536cfff

  • SHA512

    b22a6a9c3d407ef7627bdaf27e196bba6a92d6a94af7901f9afdbd39f45d070334e9f419f93fd3a34c9ef9033e056967f2c449efed5cbc82df7d45af8bcd80d1

  • SSDEEP

    24576:RyhDv7zpuV3DHLIuyHu2GTQIQxzZwUjBIzgr:EhDvJulDHL5yHVgQIKl9jt

  Score

  10^/10

  redlinedarkgenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1