Extracted

• • Target

    c92ea7d25f9aff0f3979b880fe2aad8b49bed2b7922e24bda7d7db04962cea3eN.exe

  • Size

    426KB

  • MD5

    5cd957abc84eba00522a29ae7b9c23c0

  • SHA1

    250ec8486d943bf92e8106cddc603199968fc0ca

  • SHA256

    c92ea7d25f9aff0f3979b880fe2aad8b49bed2b7922e24bda7d7db04962cea3e

  • SHA512

    2a6349bddc8e55db1abe7735bd7096a69c58691553c187a1271ed6af4229580b458bde0940511f01c0b6b7b9a0fcb76475889ee7a009d1158e36677c71062793

  • SSDEEP

    12288:obvE6fKePak2ohwTeR8N51jWy7ZOdHn3te:Qc6fXws8N51jWy7ctn3

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2