Extracted

• • Target

    7f1b3651b3c429d6b2b181f2010b20bd258c403f5b77a31cdf3a1f55be4a2ba6

  • Size

    1015KB

  • MD5

    33f36b029a40b84f9c6a4b8ce698d803

  • SHA1

    d196e003a69b36d5213e6e34ba8a27831e57886d

  • SHA256

    7f1b3651b3c429d6b2b181f2010b20bd258c403f5b77a31cdf3a1f55be4a2ba6

  • SHA512

    b2dda988c2a7af3f6340c4a73fee969e27a240bc2c63f9431392fe303a75a87e3d18c75515cfe83ab69449733aac6b6fab31461ae1a23309a11c7b5c5b2c6aaa

  • SSDEEP

    24576:tyYGEHGNkbN67VfdJH3nbegM7fzK89s4DqYO:IYGEHJNs1H3aPzb3

  Score

  10^/10

  redlinejonkaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1