Extracted

• • Target

    bcfed879203a5412d56e9fa0b18cb2ba39ec70b35241215fdffcb145ec64d372.exe

  • Size

    2.3MB

  • MD5

    2dee285e0dfc56b423c87de5e33407ce

  • SHA1

    2ae1082d75469390df22b0fb31568e2a9c5c1a24

  • SHA256

    bcfed879203a5412d56e9fa0b18cb2ba39ec70b35241215fdffcb145ec64d372

  • SHA512

    f6001e9542929923fb4b3e1d1218a66b25103a84b46756dd89d3b70b5fcad919cd8eade98a881ea291a7fea9a596a43b40c8c2757012a46564a7cafc419c866d

  • SSDEEP

    49152:H5+hFHxq1JcJ05gwY7xnXst4sQWKh+BH8gjlPh4Tcaxiz8lVHTIioOFZQ+t:H5aFRqxl6hyHHa+BH1jngcaxiqZ7t

  Score

  10^/10

  redline@normhhddiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2