Extracted

• • Target

    38cf711ee6bdc2e6abd0a60492153547696dc95d5c8c88f81a53ac9ab3cef548

  • Size

    584KB

  • MD5

    66a135eac59f5a1316b721bf3cad98b8

  • SHA1

    c40363a5bfce12dea5815056f541417795142785

  • SHA256

    38cf711ee6bdc2e6abd0a60492153547696dc95d5c8c88f81a53ac9ab3cef548

  • SHA512

    972a334c78c390fa4fde2c7acf2fa0123e6e8c7ded8d40e860efdc6203a2e81117eb60ca9e82aa6722ade8dc1be24cdf8f03a9170e1808fb3de071d98c1eab1f

  • SSDEEP

    12288:3Mruy90hLtXgFiB2+87CFg2dSFJvXvx8x0v4cLOv6WrAN6:FyyQBIkzvXvx8x0vZyfR

  Score

  10^/10

  redlinedizaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1