Extracted

• • Target

    660cabd6fa9a1e9b46fbd6bf6606b38502aa583ac0636b54feb6c129d7c926bf

  • Size

    481KB

  • MD5

    c03c1ae1cc25ac10f55bc2959980b22e

  • SHA1

    804ae310cd0a1c51e9d84bf58bdc2cc9c38d18f1

  • SHA256

    660cabd6fa9a1e9b46fbd6bf6606b38502aa583ac0636b54feb6c129d7c926bf

  • SHA512

    21ddd40110ebf9d16a3395e5c056b56bc5e12816b8a68e41be97d37a9376a2691133c32a5e6bdead4559aba2638fbc8d2e29db538678ca3a6e8db6e5d1d9b71f

  • SSDEEP

    12288:kMr1y90G1MLZ6hGZZH7mNg3/nSkeFAt3el90:pyBML/fTxeJ90

  Score

  10^/10

  redlinemisarevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1