Extracted

• • Target

    7b2a5892fdf9193fb4bd5aee6db9c43a924c061175e92380a9b111119857fa1eN.exe

  • Size

    582KB

  • MD5

    e34f12b89a6b7477e59bfca4e56d1ed0

  • SHA1

    f2f3a16c5f858b7174e2e35f7eb6cfe067b1201e

  • SHA256

    7b2a5892fdf9193fb4bd5aee6db9c43a924c061175e92380a9b111119857fa1e

  • SHA512

    687f877a2e13c01d19b152f53de1c84585b5df87bee9bd401b61b57878aa1de767bfc16901d9c075d7b183b9bce454d77ff0f362279b14734cc8de3b3a27ebd1

  • SSDEEP

    12288:4788qGmnjbGIT8ugcTTfiWijb/F5xPgJk6Pnr:C83nEJcTTfinbd5xPgJkyr

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2