Extracted

• • Target

    b1a83c2d2962cf0fe4d4940df9740a06602cf9ead2dd9456cb2475efaa327a4f

  • Size

    583KB

  • MD5

    0b710baf188f9fec3314c7d15e47cba6

  • SHA1

    8c8fd58ae31d09967a20a3453914484569080f69

  • SHA256

    b1a83c2d2962cf0fe4d4940df9740a06602cf9ead2dd9456cb2475efaa327a4f

  • SHA512

    597e44e2797e8956998a56a23fb6a864e102c96898d3c0ddbe3de0a48021ed730bd6ba93c55ec24aaf15c0c42089584509fafaf83279b879b02d8b116ccaaae3

  • SSDEEP

    12288:eMr0y90P8SE3RFAWT1ouI4cql3lWhl9xPIykWATD2oJlN504:Gy28S0AqM4yNPVlA3PDN

  Score

  10^/10

  redlinedizaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1