Extracted

• • Target

    a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9

  • Size

    1.1MB

  • MD5

    853ecd6b699d3bdef75ba5d943867379

  • SHA1

    267dfac5f010530ae88d421e4f23966a7044f68c

  • SHA256

    a0c7b6c2f67ec7f2af88253d585ca89ecce7d15e67a3c8aee148a306d954b4d9

  • SHA512

    ba5f12e54312c2a381517053dd7c6a65c450a41ad1de4127ce0c294c427b43214f95d7481ec2d4e271aa4d025738f3567195bfd3bfe4dd2b7813044ac3f1e5df

  • SSDEEP

    24576:JyZzafrCv2Qs8wOyukig0M1k+NcdjCxrgPKFSoK:8NwnQBwFudIrUCxrh8o

  Score

  10^/10

  redlinelindaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1