Extracted

• • Target

    d504010bc91d49f497258c5cf3cc09608b22676c61a3c3a904ed5f6ce20a9ad7N.exe

  • Size

    582KB

  • MD5

    c8ec649979379a72fff2076ce828de90

  • SHA1

    96fd087a80dc44f3592cdb047ab673831a4bc90b

  • SHA256

    d504010bc91d49f497258c5cf3cc09608b22676c61a3c3a904ed5f6ce20a9ad7

  • SHA512

    68c3f842f21732c64dcb3f3b710ebd6d04e604e089ab1dbeb59c44fde40d32853fa902da15515e4fdd7f1a1edd12f2a84bf477c60d4a4e8985c28c10d7b9eb3b

  • SSDEEP

    12288:J71d9GZJOFHzMHUl/ilYMUp4AU/tRI7hra:l1uE9p6lZUGAOI78

  Score

  10^/10

  redlinegenadiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2