Extracted

• • Target

    66db7d578fb62158eb80ea7c18c800b852561317ad30ca2f7d9998c02e5a563b

  • Size

    1010KB

  • MD5

    d3aba768253b69f0104739b89f1381cd

  • SHA1

    74cf818b9492fac55379e5138deaae21db63bf82

  • SHA256

    66db7d578fb62158eb80ea7c18c800b852561317ad30ca2f7d9998c02e5a563b

  • SHA512

    723d12512bd58948f2ac36f93dde2558a0dbc0cf5c417e59c35b7373693e743654808974285b015283993bd576189ed1404ed5804ac93ab8c98d928f393862d7

  • SSDEEP

    24576:Py6g2mULnDMoRe8/2bIPBbOzHsmh/dkTdJ5v5bNeB:aomUrDrX5CsmsTffNe

  Score

  10^/10

  redlinedownevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1