Extracted

• • Target

    01c330edefb4acc90d976f10d2b4fb70598a851d9302f602d1d3ca0142081057

  • Size

    1.0MB

  • MD5

    cc71f40498be02922561ffb0c42c158f

  • SHA1

    52f2af9aa5d6c6a92ce82af9ffffccfa38db4943

  • SHA256

    01c330edefb4acc90d976f10d2b4fb70598a851d9302f602d1d3ca0142081057

  • SHA512

    0ed4949d45cdc60bded6d643804d8953e11667c2205296b308e0124001e1878e2eeabccb7a2f81e95f621a6c19ff6558baef30dac3317e8a2e365839cd4c88a4

  • SSDEEP

    24576:4yWvlIkLUusmLmNioKpUkg9+EugAh3CSru5+w5E3S8QxiYeCo23:/ElDLKJNiJRg9+T8558QYt

  Score

  10^/10

  redlinemusorevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2