Extracted

• • Target

    dc3c3787785ea603252f30def32d4b800912b785b9cf4cdcd14fb1d3942070da.exe

  • Size

    414KB

  • MD5

    ef708969417e964088ed0b8c8cd34cce

  • SHA1

    fb8fd5638cee70a81962d8644b3205aa99b8a82a

  • SHA256

    dc3c3787785ea603252f30def32d4b800912b785b9cf4cdcd14fb1d3942070da

  • SHA512

    ca85c9046edf24491f2791e952b008123b7b2d4e33c232070147c39b0f89f79f436b0b1d60f8453cc235abccad617e0b88b7ea5d5388e7cdf7792c676ec968fb

  • SSDEEP

    12288:oY+g9nUppu7s+Xc7lL7X1m4ZOlDv8lbh7:Uu7s+Xc9xmkUUlV7

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2