Extracted

• • Target

    0a8b8d973e5bc3013679d46fb4aea58f_JC.exe

  • Size

    673KB

  • MD5

    0a8b8d973e5bc3013679d46fb4aea58f

  • SHA1

    35225e42638b7ef9a47ae8dec21760c8af02cf83

  • SHA256

    4c8cc476763730d7e0df2e04e2d2aafa7aeacf0f74caa8f1cb9021f6981719fa

  • SHA512

    2997926633129db5bd4f40b7d514f9210d731ce83941437f376965845ca13b5057f58af7591c6dd56307c21b4fa2a92da9483b364592a43e916b17fc0a00d4c4

  • SSDEEP

    12288:gMrLy90XrSfd4Vb9E+GloEGnV1ewp23rCmIdsDSgzSZgvD2U:byrW4yEGfa7CmIK2hgvD2U

  Score

  10^/10

  redlinejonkaevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Loads dropped DLL

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1behavioral2