Extracted

Extracted

• • Target

    3fdc6cfae2a10b7e6a24d75df8fbed83b345644d0b97ff5a979e660d197c4c38.exe

  • Size

    773KB

  • MD5

    31474e244f60b78507a16e70b56de0c0

  • SHA1

    5fdb8fc72a58241f444700414db3dc29dde4854d

  • SHA256

    3fdc6cfae2a10b7e6a24d75df8fbed83b345644d0b97ff5a979e660d197c4c38

  • SHA512

    dbabaff72507ee505f1aed809a2f7652a9fd9ab8756838e6b92ac090c6cea2bcf6566962caab82ae369545a0b533cab97b55c191f1e0bcde75c4c922786d5f15

  • SSDEEP

    12288:Wy90Td+yErsNNoMvHZ/Tl9gOxJBkneTWyLnPscUo/Pb4JVgCkxk/0JXllSxRiNlG:WyzINNlHZtxrZsQHb86WP

  Score

  10^/10

  redlinedantegenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1