Extracted

• • Target

    7aeba6bb3ecf7dc23027590b7298072336b72728e3c24c587ae516b272c186b6

  • Size

    700KB

  • MD5

    3cee1f649d7bd84aebd89d6f92447439

  • SHA1

    9327f6d47e060c6d0bb29e062d50db9f2afd595e

  • SHA256

    7aeba6bb3ecf7dc23027590b7298072336b72728e3c24c587ae516b272c186b6

  • SHA512

    91c6d4ca96c543b53280c4da7ee7a737c7c7078d8a2c1f59ef2a7ad19a6f5880adb26b0ee92d4308b53d432403cf7f72d69267918de131e28822ed8e36b324f2

  • SSDEEP

    12288:jMr5y90aFq7kuuwvXqroMxIAtqmnqKu6BqxY2jO+cJBRvLYbguNLEUoEd:iyPF7uQI0DqGBqO+cJIbguNQw

  Score

  10^/10

  redlinesonyevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1