Extracted

• • Target

    d30d8079fdec2eef006c114eff8c6968c9c243a7af6f93f9dda43a31991f16e6

  • Size

    1.0MB

  • MD5

    c24f2fe24be664417f13029dbf45342f

  • SHA1

    3aa2ce5befca1e764a925287bc912b7f9649dff3

  • SHA256

    d30d8079fdec2eef006c114eff8c6968c9c243a7af6f93f9dda43a31991f16e6

  • SHA512

    0f6df9f973f84022fd0001a15df05d6f44943a9752aa30add11fa225e6119c96f4b8b9f5a2ebeb25f891110316ea9831692ed08b43a7a0e822d2bc798bdcd017

  • SSDEEP

    24576:gyDTFq3m9BV7CbmPDt6SZReUIX1Xg/pQFAhXPM:nDZZBmqLb4UIwp8Ah

  Score

  10^/10

  redlinenarikevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1