Extracted

• • Target

    eee2af8cb9fce696685e45f7f328963cfdce3ac4c1bc55775e46205b2b4ee333.exe

  • Size

    1021KB

  • MD5

    3eb41edab78db1b73fe65e768c0936c1

  • SHA1

    9e623ff0f9a010baf6ec0a845f610d366cd33155

  • SHA256

    eee2af8cb9fce696685e45f7f328963cfdce3ac4c1bc55775e46205b2b4ee333

  • SHA512

    51fef1595378fcf089d7343887e94b31648101e54fa20860297c3e51a58a05106fa7035b725fc08900fe5a3148cd3b276f1f5286b1c8cd9c2dfca9de9026bd8f

  • SSDEEP

    24576:Ay9lAduF8o5mmqZwcEEfjg3iuQJALUpU6uE7Hu:H9ofopqScEAg3IJsU9uE7H

  Score

  10^/10

  redlineluzaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2