Extracted

• • Target

    7a13ff95c774234bf2cb0a8b847335065ec3eecbe3bad81ba53734bbdf6271c7

  • Size

    1.1MB

  • MD5

    eea8d656b3821b43c3c0660ea32aea88

  • SHA1

    cb01433e9ea5b86f28cd66b20f8eccfe32af55ff

  • SHA256

    7a13ff95c774234bf2cb0a8b847335065ec3eecbe3bad81ba53734bbdf6271c7

  • SHA512

    c851a0b5b96994e705f570212f5289d5a876d2dbb551d9d020851ef1b6beeba375820f7e1d8ce9f70ef5a84ddba7bb21250c6a21283873dec212845d201f4282

  • SSDEEP

    24576:Xy3rJNaCFk56IM1Eb9ySc7Gj8ZDYO3XqscB30:i7JwCFk56IcEhySwGj8ZsEq

  Score

  10^/10

  redlinedomadiscoveryevasioninfostealerpersistencetrojan

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1