Extracted

• • Target

    tmp

  • Size

    581KB

  • MD5

    c9968ef91ff9712743285c79271a7155

  • SHA1

    b2e293ef8276bd29c9751adabe6742b71735bf81

  • SHA256

    8dae5b41823c4d24ba663ff6141d0354a049ea034c0afaf8da86e66fe6740122

  • SHA512

    e10b439dbd64c2d0b74f1aca639638474d1d96a4310242779e5eab12c74e59faa61709e545d6b222b6da8c3a788550aefb108cde5b0e26e485558763c6566abf

  • SSDEEP

    12288:EMrpy90KdSwdNLtrOHVyUlw2U01gz2ojZbse89mLMQp4rNo9v:dyVdSwzpWJW10untb89oMQp4ri

  Score

  10^/10

  redlinemaxievasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2