Extracted

• • Target

    968bc7ff34c50875bcdc9702594cfb3fdf6e4a8df6e71922e8b696b6b0a5108eN.exe

  • Size

    495KB

  • MD5

    57f7c831b49f8f36bfa78eb6f926b4d0

  • SHA1

    076ba963ae01bd4ab0c408be8746ec18ed188363

  • SHA256

    968bc7ff34c50875bcdc9702594cfb3fdf6e4a8df6e71922e8b696b6b0a5108e

  • SHA512

    527c10ad6dae8ab895c876f52c019fbd7a3e520cc63dc20e2362e8cf4bc58aefd3e34a950e854567cedf8fd7e07bb9d1797a89632307c5ea324b238c1119fd5a

  • SSDEEP

    12288:rVYT8EAmbt0A7Y85j9z54lIZwbyjDQxj2xlNU/CqoMip:rVQymh0kYJEGCDGMMfoHp

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2