Extracted

• • Target

    999b21745d5da6d1d953d9b20464126a23d3078d6e741e975443cf8b7c13c496

  • Size

    1010KB

  • MD5

    d414622702e50b8996985ef28b13305e

  • SHA1

    c6b1a10f4e098ba508cdcd60a8b68b494562f21b

  • SHA256

    999b21745d5da6d1d953d9b20464126a23d3078d6e741e975443cf8b7c13c496

  • SHA512

    a9ebd5605933a24c45d3f6f675c4c21f1de1a002def4cd77c536de51ad5ec9d2915385c4a86d0094761403560faa0104e72968a52b8099decb46ffb31c71ee75

  • SSDEEP

    24576:cyjtFGrlhj2t659LEBEkdBHk3ditaj/tb:Lid2t6bwE0BE3Ytaj/t

  Score

  10^/10

  redlinedownevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1