Extracted

• • Target

    92a3d02de3d565d66a741a56571f96c5317ad26eb276d5f0f61d08a460e461a4

  • Size

    1013KB

  • MD5

    c5f74e9fc0d13d755b4f7a717e4df9db

  • SHA1

    7fbddd16c96fd2ab4b591d0f1d769044955a517e

  • SHA256

    92a3d02de3d565d66a741a56571f96c5317ad26eb276d5f0f61d08a460e461a4

  • SHA512

    4116f2766fa0a5947a704b2f1fcba0f395f9ba07f25b2a41e59f27e5616d75a08db4f8c9a3328866010b4a21f960557bc3b9c87c0425d007c1376762c9fc9bf9

  • SSDEEP

    24576:SyotZnvEVZMZxFzeoNoHXQgBaADY5ANJ8WkLu5z339WdV:5csVZNgo3fB05AN/5z3tW

  Score

  10^/10

  redlinejonkaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1