Extracted

• • Target

    45b26e56b5da762c4ccdf36524d93f02d07b95192439a739e5e21509eede124f

  • Size

    1.0MB

  • MD5

    4542adfd01621aa38c28e1ade5524fd3

  • SHA1

    5ace280e419588fd94c66a7a1e8967379f14a576

  • SHA256

    45b26e56b5da762c4ccdf36524d93f02d07b95192439a739e5e21509eede124f

  • SHA512

    981820ab772137ef3347626ade6c03ca349d0ee6573452ded0dc9f3897c950c6c7db122463b51b452c75e48be525662d4bbb4ca6e48971bb68a2c5d5dc510eae

  • SSDEEP

    24576:aybX82FLEKvKY1e2i8vIuyd1k2CzlR/7Za1Pg:hz8mLEmKY1e2iGIFd1k2CpR/7Z

  Score

  10^/10

  redlinesonyevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1