Extracted

• • Target

    c184cab6a9f48a02334fd3abdfba8ff9b63e53fb573972db063678724b1900e5

  • Size

    1.1MB

  • MD5

    a78c8949f2bd849c621263b0bc6f2fb0

  • SHA1

    7d3c379dd15fd9f09c0ddd40139c03fafbf65e29

  • SHA256

    c184cab6a9f48a02334fd3abdfba8ff9b63e53fb573972db063678724b1900e5

  • SHA512

    5484002a5094bcb1c3283a3db9a52c5c0ff5f01a1eed78d358b69ea7d54198f4892b7f53782152c7a5fd909f4f94ec990a24b6b6739bda71cd40a17a1d93a334

  • SSDEEP

    24576:IyKaTofEyYZYkFk8Yuar5S1t/d5FWxm3yESRGzV4+6YRm:PKadvZYkFk8YSjVMmiESRF+BR

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1