Extracted

• • Target

    16df818177cc642af38b249c9a7f7d1596a63808794ab31a82b9958e0a6a5a89

  • Size

    1.1MB

  • MD5

    abe8d8943932bd347111d7d81064d716

  • SHA1

    7009162eb6ae9ada5d7733adc052467190cb850b

  • SHA256

    16df818177cc642af38b249c9a7f7d1596a63808794ab31a82b9958e0a6a5a89

  • SHA512

    46ab2c396e776da7ac72bfbb9b5d331a25cf5dfb882796bc8fd4da68a798932b667c5fe2b0ea55a5a704b91978d0381189755978c7f30f44ade58bf4b4d65c5e

  • SSDEEP

    12288:mMrBy90aYoRiOF/sCc5DivCgZo5JjJnFkqAoRFk4Mhfiu24AGFVvlLtDMgYU3UeS:HyfACclMCPFkWM8GnNLtIg3zuKypKnc

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1