Extracted

• • Target

    474a06852b1fa4892e3cdba9f44adb81b61bbaaff8684cc206698b96c22a6b63

  • Size

    426KB

  • MD5

    58feec2b84cd62a3f94b185570d97601

  • SHA1

    baca655934e20d04e0bbbd72135b7e39c5267b08

  • SHA256

    474a06852b1fa4892e3cdba9f44adb81b61bbaaff8684cc206698b96c22a6b63

  • SHA512

    aafbf7f94b2000aa9114e760b43f80824e7032da8d9b0fd88a8c0eb9ac0a125bff7795620fb9f9647376c205370e48d3759765f3ff54c524d3c7083a342e5903

  • SSDEEP

    12288:R7vQMcmljqOWJFwMi4haxwYd/1Li6NFh4m:Z4MFle7JU4QhNcm

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2