Extracted

Extracted

• • Target

    99a18f1e8d43e165ed87f83e3fe86a93902645657e784be2cc376c45c048462d

  • Size

    581KB

  • MD5

    8313dbea7d5ce458dd15d4e80e206416

  • SHA1

    b5bdcc44f91566bba61df16d29de5554d7102ad8

  • SHA256

    99a18f1e8d43e165ed87f83e3fe86a93902645657e784be2cc376c45c048462d

  • SHA512

    8eb83319d4dc9550965f5066ca4d0c10c0b2d278b40d0fe2f3621a396c5bd277a2dab7e569eba03355f4d56703d8b773da8299026731805fe4e1bb240b5cb76a

  • SSDEEP

    12288:ty900sXDohCadSM9bKtEZ6EvDU3MFyDS4HtEh:ty/sDadS2Kt26GU3MM+qEh

  Score

  10^/10

  redlinedarkgenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1