Extracted

• • Target

    22551fff44698c2f7a48d2f4b8a7bcb58dd44a70e0b01db48d850bb1efcbbd56.exe

  • Size

    580KB

  • MD5

    4fecb1d7deb6932dfa5317593b17f8a5

  • SHA1

    2005ff6e0b79af16512c6db32e65d2c1ae021c9d

  • SHA256

    22551fff44698c2f7a48d2f4b8a7bcb58dd44a70e0b01db48d850bb1efcbbd56

  • SHA512

    c502a4ff304911120b5033a7aac99d36a1d5acd5950c5ac37a70f7d236d00a8d60796e9d38602e0fc0887f8a99db606569ac363f99ba730557b94542d47fb566

  • SSDEEP

    12288:RMrZy90+D8295Pkghk6ehZJDPhW82zqzNdiBjt5351qk:8yzdk93zr2zqHejt53v3

  Score

  10^/10

  redlinemaxievasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2