Extracted

• • Target

    266fb387a48ec60f5e7ae3554a8b505c49858f34b91651167dc59526b5c5468d

  • Size

    1.1MB

  • MD5

    fa4e8be86ac07119d6f4add2421f240e

  • SHA1

    372e43313f62ccc145cb18711f411c8eef0220e8

  • SHA256

    266fb387a48ec60f5e7ae3554a8b505c49858f34b91651167dc59526b5c5468d

  • SHA512

    e2fa9e0b250362a784419e7f75997791749e060343e482781f47e597b842b87d62225ac6fe0c6c5e1160e6fcc17dbff1a4f4bacde49a04f3ddfc22f22f112c14

  • SSDEEP

    24576:byyFz5jTTuoR7ac2j+iGPtQB2ZP3Dv423JjZePfW7eboCf:OyVhuop92S3PeUZPTzN17ebo

  Score

  10^/10

  redlinelukaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1