Extracted

• • Target

    00f1ef1296db211624915be11a8edcfd8c95e590fb7e5efeb9cb1a85aeed88d9N.exe

  • Size

    495KB

  • MD5

    2206b066bafcede0158d0f8af03e1870

  • SHA1

    07b59c81dfa868589164c48dbf453d4e6ddf7cbc

  • SHA256

    00f1ef1296db211624915be11a8edcfd8c95e590fb7e5efeb9cb1a85aeed88d9

  • SHA512

    5a2d56ad228a7236cbc4eed277bf776341b85066edd125b7c80b6819964c765a41354b4aaf49628392edb02744ecd7ab3b44cace16e373a95d7164a3fa4de5b4

  • SSDEEP

    12288:2VYT8EAmbt0A7Y85j9z54lIZwbyjDQxj2xlNU/CqoMip:2VQymh0kYJEGCDGMMfoHp

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2