Extracted

• • Target

    3f0bd8492c58622c897bf1241f442f2a4d3c8dd028240fcc431ae2de9507f14c

  • Size

    488KB

  • MD5

    43a757110c39516bc51d3ae6147a35ea

  • SHA1

    51625af005baf455e18ff6ada279bd2ea390b13e

  • SHA256

    3f0bd8492c58622c897bf1241f442f2a4d3c8dd028240fcc431ae2de9507f14c

  • SHA512

    9919826579b3adfc68cb45d53562e80b56f61443266b854d77829f88376a869cefa012963c88386f877d127875a00f5ab19a65f8dcec33d5d99737d262a64ef8

  • SSDEEP

    12288:vyyrElOIzAeS87kpIO6xMcX1HPKSIsO7N:aK0fZhbX1H7IsO7

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2