Extracted

• • Target

    e92768496434fd38c23e0b3c581499ea8bca541e77f45179a04850abdc7f9d1bN.exe

  • Size

    424KB

  • MD5

    826dbd9678905b3773f5609a0c51a240

  • SHA1

    185a02664839ff4f70b0d49500c2c944ef008e7a

  • SHA256

    e92768496434fd38c23e0b3c581499ea8bca541e77f45179a04850abdc7f9d1b

  • SHA512

    fe3f2296517c00b05b77f573028f3c38a33e66b3debeb9d33ebaec795c67a271ca467f0c205be4238e6959ca6e301b0b1163ea19200267d5e0c0d0e217312994

  • SSDEEP

    12288:TiAMagnYfSn/8Pt44URdZutqiPDk/NPJBx55he:CayLn/o/URdZ/i0PJBxPh

  Score

  10^/10

  redlinenormdiscoveryinfostealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2