Extracted

• • Target

    ef7bd3a35eae472fe63c10d808bf62f6f382b899b2a51e212bf3d708de9d11ea

  • Size

    887KB

  • MD5

    cdc0618ac0d3265cc6231999ada78eac

  • SHA1

    3e26f74b320c0e729e4938804e7b828f68f6e204

  • SHA256

    ef7bd3a35eae472fe63c10d808bf62f6f382b899b2a51e212bf3d708de9d11ea

  • SHA512

    3bcb999b7909edb079d881f7e5fcdea91df753c935998b24ddfad540414344183cc6e439a41135bb2e02236fe8f770a4d24244d9da7eaa1b3bbfa1348c16075c

  • SSDEEP

    24576:Qy/F0GB06E2Rflc9+97vzK15b9DopfCAJAF:XNPrtppzc5b9UBC

  Score

  10^/10

  redlinejonkaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1