Extracted

• • Target

    5b5fd8f37a036d8323fd02dbd8ae21ba233d591ed2e45dac8ce887bd505e2cf6

  • Size

    580KB

  • MD5

    b4518646701999e56883fbcbdf1eb9e8

  • SHA1

    3e2cf8d26b5a9cb4e7224617ad9a12bea2921b4c

  • SHA256

    5b5fd8f37a036d8323fd02dbd8ae21ba233d591ed2e45dac8ce887bd505e2cf6

  • SHA512

    042f7e57c1477aaafabb7bd3ccd41ba787f65bbd544ff06517290db7bbffef803a9e5839e6d8cd4c78238e1681a078a08261fe675d59205cbac685f768d1588f

  • SSDEEP

    12288:FMrOy90sSi8E2Qwi8YupgdaZLdHssxTH9i3USAs:nyLJLwi8YE0aZLdHsQk3t

  Score

  10^/10

  redlinedizaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1