Extracted

• • Target

    15eeb35a13d91bf1ca71f51191685a52c9ffd11acd1275951a50f7cd4cfc6b4bN.exe

  • Size

    426KB

  • MD5

    626984a098500a0401eefa6c8a5c9550

  • SHA1

    26924f8ffe96671e6ae98ac5d7d62f47b835d7d2

  • SHA256

    15eeb35a13d91bf1ca71f51191685a52c9ffd11acd1275951a50f7cd4cfc6b4b

  • SHA512

    55b6c8a1bf30029a2f93e45bbea5e0673f475a06548553fb3256e84ace2fbb1f933231463e7a94a966dc23846e0a69ea4ef597dd8c0eb8546a6da56a26eb57e1

  • SSDEEP

    6144:J5GqdxkaGma2QEllm6qiU8dpaEDmDka4I0pG7NPwJOxELmiXGQrOHqY1QJD:J5Gqdxk1qlfS0OD4I0piPJNQrkL2Z

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2