Extracted

• • Target

    58c8dd496d5908760c60af99aa20eaa43caee876561ef799cea440dbd720d2fa

  • Size

    700KB

  • MD5

    b4a936a1e098a33fbcc89886d422a61d

  • SHA1

    4eded5403ab3964d47557df4523a44dd88687099

  • SHA256

    58c8dd496d5908760c60af99aa20eaa43caee876561ef799cea440dbd720d2fa

  • SHA512

    a00a940311b092f92874e73378229657b14260782eaa8d357090bd6c34ff7cfb7a3eba17e0df1c26fc954bd71a8b1bcb3c29e8ce4eb215cb3427d46d723cd09a

  • SSDEEP

    12288:AMrly90PhMhDMkaBta7uO2j9I6EJrwOZ2OjqulaRumDWBRvIYbgf4XJjr5:1yvMkQouOoKwOZ2OjqoaPDWPbgf4XJj1

  Score

  10^/10

  redlinesonyevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1