Extracted

• • Target

    1556eb37de3c90428a1d9a64f1378fc8ac3842ed4a253d926faf680a65b6278c

  • Size

    415KB

  • MD5

    51292d57f3c2b66cec9aa230668ac80f

  • SHA1

    eeabaed9c715eccba7fa1af9fe16b201d4c0cb7e

  • SHA256

    1556eb37de3c90428a1d9a64f1378fc8ac3842ed4a253d926faf680a65b6278c

  • SHA512

    631049911ac2e3321cdd4b02b90c07fa62a900e12ee27e086b12940c696c4bb37dcf63763d9be7db0953ea304d829f6868e81c23b12e9799c5b047d8bd21ac18

  • SSDEEP

    6144:MWa1OEXyUoC1RkhRAdv7weEZ3FpTo3Gt3q7Z+r8vkDHz9APLcLYo6aMzyFs30T:MWt/UoMiVB3FpgGVqcr8voO8

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2