Extracted

• • Target

    522a974ac76ef62529d04a6e8e5162bcf25a9f146e1e4c5e3699c22cbc2359d1

  • Size

    579KB

  • MD5

    ab892fa512fa7f3b7b8fe03e25fce2fa

  • SHA1

    9038caeedaf5ea8d87b3fb12abc0da268700e0b4

  • SHA256

    522a974ac76ef62529d04a6e8e5162bcf25a9f146e1e4c5e3699c22cbc2359d1

  • SHA512

    bb13296f44215eee869a065046b46c399f2ef3b24b1b5eda52f73a5794c25c67bfcb4cb6e2fefa06b6b4195f6a367fc942e8756e89ed24cc0badc878a6b17ce8

  • SSDEEP

    12288:IMrfy90vUZnvF3fyPmG2tuEZn37RiTNv1TjaeOXv:XyHvF3yLquAdiTN9TjPe

  Score

  10^/10

  redlinedizadiscoveryevasioninfostealerpersistencespywarestealertrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1