Extracted

Extracted

• • Target

    afedf7c043b9adc378fdef04f9c754ca4801f69d2bc3b5b14fa9b2cc9811e105.exe

  • Size

    774KB

  • MD5

    0d5885f75f944258aa573cbdf3983744

  • SHA1

    52e18cb4d18feebab4ad846bd57f01541370582d

  • SHA256

    afedf7c043b9adc378fdef04f9c754ca4801f69d2bc3b5b14fa9b2cc9811e105

  • SHA512

    e4b4793b5548aba11b45bfbbc23ec7ae62b0159558f95f5331021608392323ff6ef25e7f182d4f643fe9ea7d6d29fa2d87503872566efea33a41ef466b7c7e50

  • SSDEEP

    12288:qy90keWi1pyBui0Yud9lVCUzXJw27Mi00bXhv14T8NTiNZJdbWBFuqu:qyMWmUBGLzzZP7FX/4TqiNdUtu

  Score

  10^/10

  redlinedankogenadiscoveryinfostealerpersistence

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1