Extracted

• • Target

    6e1568bbb3eedfc19307327e912cf9ef7c43c65926831c42ddeaa877fffe723b.exe

  • Size

    1.0MB

  • MD5

    ad77aad43c3e1315f76f837270a022ab

  • SHA1

    b61dda4980b44e829551ebd25e034bd77b5152bb

  • SHA256

    6e1568bbb3eedfc19307327e912cf9ef7c43c65926831c42ddeaa877fffe723b

  • SHA512

    5f1e2f99cd0b621e1e172b7b27a60ff109e09d8d7e87c9304652af90ec49fb06cfab8edfb38e4513e7c6cd8f223bc5cf3a6d20f969a4296dfde14e5535d931af

  • SSDEEP

    24576:OyejuH5yjqA5/BTcv7Rh7n/OJ6TmxRNT++PfOvAf:dyuZyjqmmRt46TaNT+8fOv

  Score

  10^/10

  redlinedizaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2