Extracted

• • Target

    9a58ccb44b9b2857a2861dfb74e6e55a0b2d4268dcd6458f0806f74cf7f7b49d

  • Size

    1.1MB

  • MD5

    a24b7e457ccfb65217bdd508ff932a03

  • SHA1

    ed32a3a10583257fa83746e48564b1a1f50660f3

  • SHA256

    9a58ccb44b9b2857a2861dfb74e6e55a0b2d4268dcd6458f0806f74cf7f7b49d

  • SHA512

    0c83e4784658fda3d05ac5aa6874f2982b7216d13aff83a57fa55230f0e180d97f628d07a915a6ff2e9d51156dae6d122b1d303d734acd3b674cb578c9a6794c

  • SSDEEP

    24576:Fy1XEffszRxFkypE48JmXGg3E3jfmk268E:g10ffsNxFkbrA03jF26

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1