Extracted

• • Target

    2582399edf733d980c551f1ebc176d47f3484a263673eecc9f1f1ea1f94d28ce

  • Size

    206KB

  • MD5

    d65ff07d0bef01c1ad9b1520f3ee9b26

  • SHA1

    64f86865762227db47f9cedd6cdee8f87bece641

  • SHA256

    2582399edf733d980c551f1ebc176d47f3484a263673eecc9f1f1ea1f94d28ce

  • SHA512

    bd1342e82f13af1ed5bd798831cc98fca83a28b439b99060bd6e0b2900a93567077924e004707b73b5b0c73444f80edabf3a98a26f4d64dc3c9666ab0b9cfc7f

  • SSDEEP

    3072:Kqy+bnr+O1v5GWp1icKAArDZz4N9GhbkrNEk1fq5rzzH1I7cLIrG1PQgujQio3:Kqy+bnr+4p0yN90QE0qpFBIrGRXV

  Score

  10^/10

  redlinedizaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2