Extracted

• • Target

    508ce9d9f40483c8315b24f4d082e447d3723d646737d29f7ca596ec3da8b7e7

  • Size

    1.1MB

  • MD5

    00330c9990b90c83b7043e925ff33ca3

  • SHA1

    2edddb6c71b3177344e7ca5f12652169262f1203

  • SHA256

    508ce9d9f40483c8315b24f4d082e447d3723d646737d29f7ca596ec3da8b7e7

  • SHA512

    a9612f13227d0ed093aa44b91466a374c2301980bbcb61c1a453cd3c9db3b6faa91bae9884b673f164383a02f8677486e1a3135eeb9e290220b9770266ac80bc

  • SSDEEP

    24576:CyydljSWldLPWFkdsKJm3zyQjxXFTg00xGTipPwwP:pO9PLPWFkyTXaxGnw

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1