Extracted

• • Target

    8fd53ce372df6f42e9ddd7c6756652c2247f87669c8b6b2a913eec98c9de0ad6

  • Size

    1.1MB

  • MD5

    336353adf6869447c4df6c22d3e5ee58

  • SHA1

    f9cff534855aa185337fa0da9a81c355b1ced830

  • SHA256

    8fd53ce372df6f42e9ddd7c6756652c2247f87669c8b6b2a913eec98c9de0ad6

  • SHA512

    2d4e2fc4564a2fb5da7db3984a266e4e950cdb9b66a352f2e1ee7f1f5323b97a0e61b86d5ba66ba4968e76a171b78351b7cef61f05251c6afb0b354b8b50b01e

  • SSDEEP

    24576:kyrZ8YwIathAldGudtDzOkRogKm3snC+xOTekpiOgTjGbV5:zKfeddpKkROCCOBgnGbV

  Score

  10^/10

  redlinelukaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1