Extracted

• • Target

    8edc18f95a74ce4f0b9f49818ecbef3a367783541430562320db42a3bb039f66

  • Size

    539KB

  • MD5

    5b3241cda151c1bc44b8799852ab6dd0

  • SHA1

    a42951777cfd197e792c34d879bf2a15aac82029

  • SHA256

    8edc18f95a74ce4f0b9f49818ecbef3a367783541430562320db42a3bb039f66

  • SHA512

    3c8efd1d102266d93c5cdd9f5a7212680f0aeaca7ba85c57024eaf69eab301fc48b6aa7746e71522651f440d3b17113ef1ecfef487f354bbad4028d04c8d9301

  • SSDEEP

    12288:qMr2y90SZwMpeSESxrCl7+o49U1AQCld1bga9VT8+U:oytdASVxmlqQAdd1NPC

  Score

  10^/10

  redlinedownevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1