Extracted

Extracted

• • Target

    4647018fd0cc7e12aacb554146066e70d9257927fcd14134e75f0135528388d7N.exe

  • Size

    774KB

  • MD5

    663047274164615b5795ab8e9df35a70

  • SHA1

    4825cdf16cc3fe1e7c57c27d6fc0301d8f8e74af

  • SHA256

    4647018fd0cc7e12aacb554146066e70d9257927fcd14134e75f0135528388d7

  • SHA512

    25dc1dd3940538d9593c593419ef6aaed18fbe13e005be614542b3b79d5cc80d60156089a883977357237cd93c85e16e38ee149a0466275bbec4cbd9b1e5cf10

  • SSDEEP

    24576:qyBnjaRSYg/Xb/91Ox2tMc2v400TYiybxD0:xljwS5Xz91OxqMc2w7AJ

  Score

  10^/10

  redlinedarkgenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1