Extracted

• • Target

    126c9bdb94a802e34f637812af2f1d753c4a4f6f9733e6ab753535768eea4be0

  • Size

    579KB

  • MD5

    289c797539e006499cfa78e6ba421478

  • SHA1

    acd2518c80d2128ec136da8465e34cde0e81a60b

  • SHA256

    126c9bdb94a802e34f637812af2f1d753c4a4f6f9733e6ab753535768eea4be0

  • SHA512

    6bd58bd613363666b744b5f7025fa6e47e43638362ed797e99c584c29d8d089bcdacce914251a6ac78276d7141ada22a142018da8b86c95c03d4c5944f85eab8

  • SSDEEP

    12288:HMr1y90+ZYWHWkeVzGAvWbIcATYoMqcHKhsVeLIfSbUJt4u:Wy5FqVzGARxT/CqqfS4J+u

  Score

  10^/10

  redlinemaxievasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1