Extracted

• • Target

    e10a82f81335c791b660602e8b382ba6d32f34f87d748bf78ea084785022fe3d

  • Size

    1.1MB

  • MD5

    92333496a04a90cdc78725940436c319

  • SHA1

    38132e6460af6b22928fe8d43eb653232dd43b94

  • SHA256

    e10a82f81335c791b660602e8b382ba6d32f34f87d748bf78ea084785022fe3d

  • SHA512

    8d6bc40014928a6574e31c6a0c1f908d23b25462eeb6d82538d0a71cb587bfe3d147b8ece9a82e8d675e20f5211bd7ec23ddb4571912fc78ef17960d2b228c96

  • SSDEEP

    24576:Vyec8IdrNr5B+GCL/Yz0jFn1MPVM/QN9JCSozZy9rIxq0:wKIdZNB+Ge+MSPaYpW29

  Score

  10^/10

  redlinelukaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1